NVD

Id
9424  
Name
CVE-2011-2687  
Description
Drupal 7.x before 7.3 allows remote attackers to bypass intended node_access restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2011-07-26  
Modified Date
2015-09-03  
Seq
2011-2687  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
53746 9424 CVE-2011-2687 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=633385  View
53747 9424 CVE-2011-2687 http://drupal.org/node/1204582  View
53748 9424 CVE-2011-2687 FEDORA-2011-8879  View
53749 9424 CVE-2011-2687 FEDORA-2011-8878  View
53750 9424 CVE-2011-2687 [oss-security] 20110711 CVE Request -- Drupal 7 -- Access bypass in node listings (SA-CORE-2011-002)  View
53751 9424 CVE-2011-2687 [oss-security] 20110712 Re: CVE Request -- Drupal 7 -- Access bypass in node listings (SA-CORE-2011-002)  View
53752 9424 CVE-2011-2687 48505  View
53753 9424 CVE-2011-2687 https://bugzilla.redhat.com/show_bug.cgi?id=717874  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34534 JVNDB-2011-004776 Drupal における node_access の制限を回避される脆弱性 Drupal には、ノードテーブルに対してノードは表示するが、JOIN クローズが欠如する不備のため、node_access の制限を回避される脆弱性が存在します。 CVE-2011-2687 50594 CVE-2011-2687 9424 7.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004776.html 2011-06-30 2012-03-27 View