CVE-2009-4558

Опубликовано: 04 янв. 2010

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors.

Ссылки

http://drupal.org/node/520564
Patch
Vendor Advisory
http://osvdb.org/55867
http://secunia.com/advisories/35879
Vendor Advisory
http://www.securityfocus.com/bid/35710
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/51787
http://drupal.org/node/520564
Patch
Vendor Advisory
http://osvdb.org/55867
http://secunia.com/advisories/35879
Vendor Advisory
http://www.securityfocus.com/bid/35710
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/51787

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:unleashedmind:img_assist:5.x-1.0:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:5.x-1.1:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:5.x-1.2:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:5.x-1.3:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:5.x-1.4:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:5.x-1.5:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:5.x-1.6:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:5.x-1.7:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:5.x-1.x-dev:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:5.x-2.0-alpha1:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:5.x-2.0-alpha3:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:5.x-2.x-dev:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:6.x-1.0:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:6.x-1.0-beta1:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:6.x-1.x-dev:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:6.x-2.0-alpha2:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:6.x-2.0-alpha3:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:6.x-2.x-dev:*:*:*:*:*:*:*

cpe:2.3:a:unleashedmind:img_assist:6.x-3.x-dev:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

EPSS

Процентиль: 64%

0.0047

Низкий

5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-ww72-72c9-q73v

github

около 3 лет назад