Lucene search
HistoryOct 03, 2022 - 4:20 p.m.
CVE-2014-8736
cve-2014-8736
open atrium
drupal
access restrictions
remote attackers
file attachments
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.2%
The Open Atrium Core module for Drupal before 7.x-2.22 allows remote attackers to bypass access restrictions and read file attachments that have been removed from a node by leveraging a previous revision of the node.
Affected configurations
Node
open_atrium_projectopen_atriumRange≤7.x-2.21drupal
| CPE | Name | Operator | Version |
|---|---|---|---|
| open_atrium_project:open_atrium | open atrium project open atrium | le | 7.x-2.21 |
Related
cvelist
cvelist
CVE-2014-8736
2022-10-03 16:20:36
nvd
nvd
CVE-2014-8736
2014-11-12 16:55:07
prion
prion
Design/Logic Flaw
2014-11-12 16:55:00
drupal
drupal
SA-CONTRIB-2014-099 - Open Atrium Core - Access bypass
2014-10-15 00:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
57.2%
Related for CVE-2014-8736