Lucene search
HistoryMay 16, 2008 - 12:54 p.m.
CVE-2008-2271
site documentation
drupal
module
cve-2008-2271
vulnerability
database
access control
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.5%
The Site Documentation Drupal module 5.x before 5.x-1.8 and 6.x before 6.x-1.1 allows remote authenticated users to gain privileges of other users by leveraging the “access content” permission to list tables and obtain session IDs from the database.
Affected configurations
Node
site_documentation_projectsite_documentationRange5.x-1.0–5.x-1.8drupal
ORsite_documentation_projectsite_documentationRange6.x-1.0–6.x-1.1drupal
Related
nessus
nessus
prion
prion
Design/Logic Flaw
2008-05-16 12:54:00
nvd
nvd
CVE-2008-2271
2008-05-16 12:54:00
cvelist
cvelist
CVE-2008-2271
2008-05-16 06:54:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.5 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
72.5%
Related for CVE-2008-2271