Lucene search
HistoryOct 03, 2022 - 4:21 p.m.
CVE-2006-7218
cve-2006-7218
ez publish
content edit
language permission
security issue
nvd
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.8%
eZ publish before 3.8.1 does not properly enforce permissions for “content edit Language” when there are four or more languages, which allows remote authenticated users to perform translations into languages that are not listed in a Module Function Limitation policy.
Affected configurations
Node
ezez_publishRange≤3.8.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| ez:ez_publish | ez ez publish | le | 3.8.0 |
Related
ubuntucve
ubuntucve
CVE-2006-7218
2007-07-06 00:00:00
nvd
nvd
CVE-2006-7218
2007-07-06 19:30:00
cvelist
cvelist
CVE-2006-7218
2022-10-03 16:21:25
4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
6.3 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
47.8%
Related for CVE-2006-7218