CVE-2011-2687

Опубликовано: 27 июл. 2011

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Drupal 7.x before 7.3 allows remote attackers to bypass intended node_access restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.00774

Низкий

7.5 High

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2011-2687

ubuntu

почти 14 лет назад

Drupal 7.x before 7.3 allows remote attackers to bypass intended node_access restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table.

CVE-2011-2687

debian

почти 14 лет назад

Drupal 7.x before 7.3 allows remote attackers to bypass intended node_ ...

GHSA-96vx-qf28-6f8m

github

около 3 лет назад

Drupal Access Control Bypass

EPSS

Процентиль: 73%

0.00774

Низкий

7.5 High

CVSS2

Дефекты

CWE-264