Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2014-5020HistoryJul 22, 2014 - 2:55 p.m.
CVE-2014-5020
2014-07-2214:55:00
Debian Security Bug Tracker
security-tracker.debian.org
16
EPSS
0.001
Percentile
44.0%
The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | drupal7 | < 7.52-2+deb9u11 | drupal7_7.52-2+deb9u11_all.deb |
Related
ubuntucve
ubuntucve
CVE-2014-5020
2014-07-22 00:00:00
prion
prion
Design/Logic Flaw
2014-07-22 14:55:00
nvd
nvd
CVE-2014-5020
2014-07-22 14:55:10
cve
cve
CVE-2014-5020
2022-10-03 16:20:42
cvelist
cvelist
CVE-2014-5020
2022-10-03 16:20:42
fedora
fedora
[SECURITY] Fedora 19 Update: drupal7-7.29-1.fc19
2014-07-29 02:09:51
[SECURITY] Fedora 20 Update: drupal7-7.29-1.fc20
2014-07-29 02:07:00
nessus
nessus
Fedora 19 : drupal7-7.29-1.fc19 (2014-8515)
2014-07-29 00:00:00
Debian DSA-2983-1 : drupal7 - security update
2014-07-21 00:00:00
Fedora 20 : drupal7-7.29-1.fc20 (2014-8485)
2014-07-29 00:00:00
drupal
drupal
SA-CORE-2014-003 - Drupal core - Multiple vulnerabilities
2014-07-16 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2983-1)
2014-07-19 00:00:00
Fedora Update for drupal7 FEDORA-2014-8485
2014-08-05 00:00:00
Fedora Update for drupal7 FEDORA-2014-8515
2014-08-05 00:00:00
mageia
mageia
Updated drupal packages fix security vulnerabilities
2014-08-07 21:01:33
securityvulns
securityvulns
[ MDVSA-2015:181 ] drupal
2015-05-12 00:00:00