CVE-2005-4854

N/A

Descripcion

eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders.

Detalles CVE

Puntuacion CVSS v3.1N/A

Publicado12/31/2005

Ultima modificacion4/16/2026

Fuentenvd

Avistamientos honeypot0

Productos afectados

ez:ez_publish

Debilidades (CWE)

CWE-264

Referencias

http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0(cve@mitre.org)

http://issues.ez.no/6355(cve@mitre.org)

http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0(af854a3a-2127-422b-91ae-364da2661108)

http://issues.ez.no/6355(af854a3a-2127-422b-91ae-364da2661108)

Correlaciones IOC

Sin correlaciones registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.