Lucene search
Ubuntu.comUB:CVE-2014-5020HistoryJul 22, 2014 - 12:00 a.m.
CVE-2014-5020
2014-07-2200:00:00
ubuntu.com
ubuntu.com
13
CVSS2
4.9
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
EPSS
0.001
Percentile
44.0%
The File module in Drupal 7.x before 7.29 does not properly check
permissions to view files, which allows remote authenticated users with
certain permissions to bypass intended restrictions and read files by
attaching the file to content with a file field.
Related
prion
prion
Design/Logic Flaw
2014-07-22 14:55:00
nvd
nvd
CVE-2014-5020
2014-07-22 14:55:10
cve
cve
CVE-2014-5020
2022-10-03 16:20:42
cvelist
cvelist
CVE-2014-5020
2022-10-03 16:20:42
debiancve
debiancve
CVE-2014-5020
2014-07-22 14:55:00
fedora
fedora
[SECURITY] Fedora 19 Update: drupal7-7.29-1.fc19
2014-07-29 02:09:51
[SECURITY] Fedora 20 Update: drupal7-7.29-1.fc20
2014-07-29 02:07:00
nessus
nessus
Fedora 19 : drupal7-7.29-1.fc19 (2014-8515)
2014-07-29 00:00:00
Debian DSA-2983-1 : drupal7 - security update
2014-07-21 00:00:00
Fedora 20 : drupal7-7.29-1.fc20 (2014-8485)
2014-07-29 00:00:00
drupal
drupal
SA-CORE-2014-003 - Drupal core - Multiple vulnerabilities
2014-07-16 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2983-1)
2014-07-19 00:00:00
Fedora Update for drupal7 FEDORA-2014-8485
2014-08-05 00:00:00
Fedora Update for drupal7 FEDORA-2014-8515
2014-08-05 00:00:00
mageia
mageia
Updated drupal packages fix security vulnerabilities
2014-08-07 21:01:33
securityvulns
securityvulns
[ MDVSA-2015:181 ] drupal
2015-05-12 00:00:00
CVSS2
4.9
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
EPSS
0.001
Percentile
44.0%
Related for UB:CVE-2014-5020