CVE-2014-5179

2014-08-0618:55:06

CWE-264

[email protected]

web.nvd.nist.gov

drupal

freelinking module

cve-2014-5179

security vulnerability

access permissions

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

6.3 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

66.0%

JSON

The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote attackers to obtain sensitive information via a crafted link.

Affected configurations

NVD

Node

freelinking_for_case_tracker_projectfreelinking_for_case_trackerMatch-drupal

freelinking_projectfreelinkingMatch-drupal

CPENameOperatorVersion
freelinking_for_case_tracker_project:freelinking_for_case_trackerfreelinking for case tracker project freelinking for case trackereq-
freelinking_project:freelinkingfreelinking project freelinkingeq-

CPE	Name	Operator	Version
freelinking_for_case_tracker_project:freelinking_for_case_tracker	freelinking for case tracker project freelinking for case tracker	eq	-
freelinking_project:freelinking	freelinking project freelinking	eq	-