Lucene search

K
nvd[email protected]NVD:CVE-2008-0275
HistoryJan 15, 2008 - 8:00 p.m.

CVE-2008-0275

2008-01-1520:00:00
CWE-264
web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.9%

The Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage permissions for node (1) titles, (2) teasers, and (3) bodies, which might allow remote attackers to gain access to syndicated content.

Affected configurations

NVD
Node
drupalatom_moduleRange4.7
OR
drupalatom_moduleRange5.0

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

7 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

68.9%

Related for NVD:CVE-2008-0275