NVD

Id
65762  
Name
CVE-2006-7219  
Description
eZ publish before 3.8.5 does not properly enforce permissions for editing in a specific language, which allows remote authenticated users to create a draft in an unauthorized language by editing an archived version of an object, and then using Manage Versions to copy this version to a new draft.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2007-07-06  
Modified Date
2015-07-28  
Seq
2006-7219  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
342413 65762 CVE-2006-7219 http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_4_to_3_8_5  View
342414 65762 CVE-2006-7219 http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_8_0_to_3_9_0  View
342415 65762 CVE-2006-7219 http://issues.ez.no/8795  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59603 JVNDB-2006-001869 eZ publish における未承認の言語で下書きを作成される脆弱性 eZ publish には、特定の言語の編集パーミションを適切に実施しないため、未承認の言語で下書きを作成される脆弱性が存在します。 CVE-2006-7219 23321 CVE-2006-7219 65762 4 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-001869.html 2006-08-09 2012-06-26 View