← Voltar para CVEs
CVE-2013-4597
N/ADescricao
The Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access permissions for content marked unpublished by the Scheduled module, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Detalhes CVE
Pontuacao CVSS v3.1N/A
Publicado6/9/2014
Ultima modificacao4/12/2025
Fontenvd
Avistamentos honeypot0
Produtos afetados
rik_de_boer:revisioning
Fraquezas (CWE)
CWE-264
Referencias
http://seclists.org/oss-sec/2013/q4/317(secalert@redhat.com)
https://drupal.org/node/2133555(secalert@redhat.com)
https://drupal.org/node/2135257(secalert@redhat.com)
http://seclists.org/oss-sec/2013/q4/317(af854a3a-2127-422b-91ae-364da2661108)
https://drupal.org/node/2133555(af854a3a-2127-422b-91ae-364da2661108)
https://drupal.org/node/2135257(af854a3a-2127-422b-91ae-364da2661108)
Correlacoes IOC
Sem correlacoes registradas
This product uses data from the NVD API but is not endorsed or certified by the NVD.