Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2011-2726HistoryNov 15, 2019 - 5:15 p.m.
CVE-2011-2726
2019-11-1517:15:00
Debian Security Bug Tracker
security-tracker.debian.org
10
0.004 Low
EPSS
Percentile
72.4%
An access bypass issue was found in Drupal 7.x before version 7.5. If a Drupal site has the ability to attach File upload fields to any entity type in the system or has the ability to point individual File upload fields to the private file directory in comments, and the parent node is denied access, non-privileged users can still download the file attached to the comment if they know or guess its direct URL.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 9 | all | drupal7 | < 7.52-2+deb9u11 | drupal7_7.52-2+deb9u11_all.deb |
Related
cve
cve
CVE-2011-2726
2019-11-15 17:15:12
CVE-2011-4323
2022-10-03 16:15:14
prion
prion
Design/Logic Flaw
2019-11-15 17:15:00
drupal
drupal
SA-CORE-2011-003 - Drupal core - Access bypass
2011-07-27 00:00:00
ubuntucve
ubuntucve
CVE-2011-2726
2019-11-15 00:00:00
cvelist
cvelist
CVE-2011-2726
2019-11-15 16:21:51
nvd
nvd
CVE-2011-2726
2019-11-15 17:15:12
CVE-2011-4323
2011-12-12 18:55:01
symantec
symantec
Drupal Core CVE-2011-2726 Access Bypass Vulnerability
2011-07-27 00:00:00