Lucene search

[email protected]CVE-2010-4775

HistoryMar 23, 2011 - 10:00 p.m.

CVE-2010-4775

2011-03-2322:00:02

CWE-20

[email protected]

web.nvd.nist.gov

cve-2010-4775

drupal

relevant content module

node access logic

remote attackers

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.7%

JSON

The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which allows remote attackers to discover restricted node titles and relationships.

Affected configurations

NVD

Node

nicholas_thompsonrelevant_contentMatch5.x-1.0

nicholas_thompsonrelevant_contentMatch5.x-1.1

nicholas_thompsonrelevant_contentMatch5.x-1.2

nicholas_thompsonrelevant_contentMatch5.x-1.3

nicholas_thompsonrelevant_contentMatch5.x-1.x-dev

nicholas_thompsonrelevant_contentMatch6.x-1.0

nicholas_thompsonrelevant_contentMatch6.x-1.1

nicholas_thompsonrelevant_contentMatch6.x-1.2

nicholas_thompsonrelevant_contentMatch6.x-1.3

nicholas_thompsonrelevant_contentMatch6.x-1.4

nicholas_thompsonrelevant_contentMatch6.x-1.x-dev

AND

drupaldrupal

CPENameOperatorVersion
nicholas_thompson:relevant_contentnicholas thompson relevant contenteq5.x-1.0
nicholas_thompson:relevant_contentnicholas thompson relevant contenteq5.x-1.1
nicholas_thompson:relevant_contentnicholas thompson relevant contenteq5.x-1.2
nicholas_thompson:relevant_contentnicholas thompson relevant contenteq5.x-1.3
nicholas_thompson:relevant_contentnicholas thompson relevant contenteq5.x-1.x-dev
nicholas_thompson:relevant_contentnicholas thompson relevant contenteq6.x-1.0
nicholas_thompson:relevant_contentnicholas thompson relevant contenteq6.x-1.1
nicholas_thompson:relevant_contentnicholas thompson relevant contenteq6.x-1.2
nicholas_thompson:relevant_contentnicholas thompson relevant contenteq6.x-1.3
nicholas_thompson:relevant_contentnicholas thompson relevant contenteq6.x-1.4

CPE	Name	Operator	Version
nicholas_thompson:relevant_content	nicholas thompson relevant content	eq	5.x-1.0
nicholas_thompson:relevant_content	nicholas thompson relevant content	eq	5.x-1.1
nicholas_thompson:relevant_content	nicholas thompson relevant content	eq	5.x-1.2
nicholas_thompson:relevant_content	nicholas thompson relevant content	eq	5.x-1.3
nicholas_thompson:relevant_content	nicholas thompson relevant content	eq	5.x-1.x-dev
nicholas_thompson:relevant_content	nicholas thompson relevant content	eq	6.x-1.0
nicholas_thompson:relevant_content	nicholas thompson relevant content	eq	6.x-1.1
nicholas_thompson:relevant_content	nicholas thompson relevant content	eq	6.x-1.2
nicholas_thompson:relevant_content	nicholas thompson relevant content	eq	6.x-1.3
nicholas_thompson:relevant_content	nicholas thompson relevant content	eq	6.x-1.4

Rows per page:

1-10 of 111

References

drupal.org/node/974668

drupal.org/node/974672

drupal.org/node/975094

osvdb.org/69368

secunia.com/advisories/42228

www.securityfocus.com/bid/44932

exchange.xforce.ibmcloud.com/vulnerabilities/63331

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

77.7%

JSON

Related for CVE-2010-4775

cvelist1 nvd1 prion1