CVE-2012-2153

Drupal 7.x before 7.14 does not properly restrict access to nodes in a list
when using a “contributed node access module,” which allows remote
authenticated users with the “Access the content overview page” permission
to read all published nodes by accessing the admin/content page.

Bugs

• <https://bugs.launchpad.net/ubuntu/+source/drupal7/+bug/1031028&gt;