Lucene search
HistoryJul 22, 2014 - 2:55 p.m.
CVE-2014-5020
drupal
file module
cve-2014-5020
security
permissions
file field
5.9 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
35.8%
The File module in Drupal 7.x before 7.29 does not properly check permissions to view files, which allows remote authenticated users with certain permissions to bypass intended restrictions and read files by attaching the file to content with a file field.
Related
prion
prion
Design/Logic Flaw
2014-07-22 14:55:00
debiancve
debiancve
CVE-2014-5020
2014-07-22 14:55:00
ubuntucve
ubuntucve
CVE-2014-5020
2014-07-22 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: drupal7-7.29-1.fc20
2014-07-29 02:07:00
[SECURITY] Fedora 19 Update: drupal7-7.29-1.fc19
2014-07-29 02:09:51
nessus
nessus
Drupal 6.x < 6.32 / 7.x < 7.29 Multiple Vulnerabilities
2014-07-21 00:00:00
Debian DSA-2983-1 : drupal7 - security update
2014-07-21 00:00:00
Fedora 20 : drupal7-7.29-1.fc20 (2014-8485)
2014-07-29 00:00:00
openvas
openvas
Fedora Update for drupal7 FEDORA-2014-8515
2014-08-05 00:00:00
Debian Security Advisory DSA 2983-1 (drupal7 - security update)
2014-07-20 00:00:00
Fedora Update for drupal7 FEDORA-2014-8485
2014-08-05 00:00:00
drupal
drupal
SA-CORE-2014-003 - Drupal core - Multiple vulnerabilities
2014-07-16 00:00:00
mageia
mageia
Updated drupal packages fix security vulnerabilities
2014-08-07 21:01:33
securityvulns
securityvulns
[ MDVSA-2015:181 ] drupal
2015-05-12 00:00:00
5.9 Medium
AI Score
Confidence
Low
4.9 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
35.8%
Related for CVE-2014-5020