Lucene search
HistoryJun 18, 2008 - 10:41 p.m.
CVE-2008-2771
drupal
node hierarchy
cve-2008-2771
access checks
remote attackers
security vulnerability
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.1%
The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remote attackers with “access content” permissions to bypass restrictions and modify the node hierarchy via unspecified attack vectors.
Affected configurations
Node
drupaldrupalMatch5.0
ORdrupaldrupalMatch6.0
ORdrupalnode_hierarchy_moduleMatch5
ORdrupalnode_hierarchy_moduleMatch6
Related
prion
prion
Improper access control
2008-06-18 22:41:00
nvd
nvd
CVE-2008-2771
2008-06-18 22:41:00
cvelist
cvelist
CVE-2008-2771
2008-06-18 22:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.8 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.1%
Related for CVE-2008-2771