Lucene search

K
cve[email protected]CVE-2013-4597
HistoryJun 09, 2014 - 7:55 p.m.

CVE-2013-4597

2014-06-0919:55:09
CWE-264
web.nvd.nist.gov
20
cve-2013-4597
drupal
revisioning module
access permissions
remote authenticated users
nvd

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.7%

The Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access permissions for content marked unpublished by the Scheduled module, which allows remote authenticated users to obtain sensitive information via unspecified vectors.

Affected configurations

NVD
Node
rik_de_boerrevisioningMatch7.x-1.0
OR
rik_de_boerrevisioningMatch7.x-1.0alpha1
OR
rik_de_boerrevisioningMatch7.x-1.0alpha2
OR
rik_de_boerrevisioningMatch7.x-1.0alpha3
OR
rik_de_boerrevisioningMatch7.x-1.0alpha4
OR
rik_de_boerrevisioningMatch7.x-1.0alpha5
OR
rik_de_boerrevisioningMatch7.x-1.0beta1
OR
rik_de_boerrevisioningMatch7.x-1.0beta10
OR
rik_de_boerrevisioningMatch7.x-1.0beta11
OR
rik_de_boerrevisioningMatch7.x-1.0beta2
OR
rik_de_boerrevisioningMatch7.x-1.0beta3
OR
rik_de_boerrevisioningMatch7.x-1.0beta4
OR
rik_de_boerrevisioningMatch7.x-1.0beta5
OR
rik_de_boerrevisioningMatch7.x-1.0beta6
OR
rik_de_boerrevisioningMatch7.x-1.0beta7
OR
rik_de_boerrevisioningMatch7.x-1.0beta8
OR
rik_de_boerrevisioningMatch7.x-1.0beta9
OR
rik_de_boerrevisioningMatch7.x-1.1
OR
rik_de_boerrevisioningMatch7.x-1.2
OR
rik_de_boerrevisioningMatch7.x-1.3
OR
rik_de_boerrevisioningMatch7.x-1.4
OR
rik_de_boerrevisioningMatch7.x-1.5
OR
rik_de_boerrevisioningMatch7.x-1.x
OR
rik_de_boerrevisioningMatch7.x-1.xdev

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

5.9 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

47.7%

Related for CVE-2013-4597