Lucene search

[email protected]CVE-2009-2237

HistoryJun 27, 2009 - 6:47 p.m.

CVE-2009-2237

2009-06-2718:47:59

[email protected]

web.nvd.nist.gov

cve-2009-2237

views bulk operations

drupal

vulnerability

access restrictions

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

81.1%

JSON

Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify “nodes or classes of nodes” via unknown vectors, probably related to registered procedures (aka actions).

Affected configurations

NVD

Node

drupaldrupal

AND

karim_ratibviews_bulk_operationsMatch5.x-1.0

karim_ratibviews_bulk_operationsMatch5.x-1.1

karim_ratibviews_bulk_operationsMatch5.x-1.2

karim_ratibviews_bulk_operationsMatch5.x-1.3

karim_ratibviews_bulk_operationsMatch6.x-1.0

karim_ratibviews_bulk_operationsMatch6.x-1.1

karim_ratibviews_bulk_operationsMatch6.x-1.2

karim_ratibviews_bulk_operationsMatch6.x-1.3

karim_ratibviews_bulk_operationsMatch6.x-1.4

CPENameOperatorVersion
karim_ratib:views_bulk_operationskarim ratib views bulk operationseq5.x-1.0
karim_ratib:views_bulk_operationskarim ratib views bulk operationseq5.x-1.1
karim_ratib:views_bulk_operationskarim ratib views bulk operationseq5.x-1.2
karim_ratib:views_bulk_operationskarim ratib views bulk operationseq5.x-1.3
karim_ratib:views_bulk_operationskarim ratib views bulk operationseq6.x-1.0
karim_ratib:views_bulk_operationskarim ratib views bulk operationseq6.x-1.1
karim_ratib:views_bulk_operationskarim ratib views bulk operationseq6.x-1.2
karim_ratib:views_bulk_operationskarim ratib views bulk operationseq6.x-1.3
karim_ratib:views_bulk_operationskarim ratib views bulk operationseq6.x-1.4

CPE	Name	Operator	Version
karim_ratib:views_bulk_operations	karim ratib views bulk operations	eq	5.x-1.0
karim_ratib:views_bulk_operations	karim ratib views bulk operations	eq	5.x-1.1
karim_ratib:views_bulk_operations	karim ratib views bulk operations	eq	5.x-1.2
karim_ratib:views_bulk_operations	karim ratib views bulk operations	eq	5.x-1.3
karim_ratib:views_bulk_operations	karim ratib views bulk operations	eq	6.x-1.0
karim_ratib:views_bulk_operations	karim ratib views bulk operations	eq	6.x-1.1
karim_ratib:views_bulk_operations	karim ratib views bulk operations	eq	6.x-1.2
karim_ratib:views_bulk_operations	karim ratib views bulk operations	eq	6.x-1.3
karim_ratib:views_bulk_operations	karim ratib views bulk operations	eq	6.x-1.4

References

drupal.org/node/468450

secunia.com/advisories/35117

www.securityfocus.com/bid/35051

exchange.xforce.ibmcloud.com/vulnerabilities/50659

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7 High

AI Score

Confidence

Low

0.007 Low

EPSS

Percentile

81.1%

JSON

Related for CVE-2009-2237

prion1 cvelist1 nvd1