RSS   Podatności dla 'Simple access'   RSS

2008-04-11
 
CVE-2008-1731

CWE-264
 

 
The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remote attackers to bypass intended access restrictions, and read or modify nodes, in opportunistic circumstances related to interaction between Simple Access and (1) Node clone or (2) Project issue tracking.

 


Copyright 2024, cxsecurity.com

 

Back to Top