CVE-2005-4854

N/A

Beschreibung

eZ publish 3.5 through 3.7 before 20050830 does not use a folder's read permissions to restrict notifications, which allows remote authenticated users to obtain sensitive information about changes to content in arbitrary folders.

CVE Details

CVSS v3.1 BewertungN/A

Veroffentlicht12/31/2005

Zuletzt geandert4/16/2026

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

ez:ez_publish

Schwachen (CWE)

CWE-264

Referenzen

http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0(cve@mitre.org)

http://issues.ez.no/6355(cve@mitre.org)

http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0(af854a3a-2127-422b-91ae-364da2661108)

http://issues.ez.no/6355(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.