Lucene search

K
nvd[email protected]NVD:CVE-2009-4528
HistoryDec 31, 2009 - 7:30 p.m.

CVE-2009-4528

2009-12-3119:30:00
CWE-264
web.nvd.nist.gov
3

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.004

Percentile

72.2%

The Organic Groups (OG) Vocabulary module 6.x before 6.x-1.0 for Drupal allows remote authenticated group members to bypass intended access restrictions, and create, modify, or read a vocabulary, via unspecified vectors.

Affected configurations

Nvd
Node
moshe_weitzmanog_vocabMatch6.x-1.0rc1
OR
moshe_weitzmanog_vocabMatch6.x-1.xdev
AND
drupaldrupal
VendorProductVersionCPE
moshe_weitzmanog_vocab6.x-1.0cpe:2.3:a:moshe_weitzman:og_vocab:6.x-1.0:rc1:*:*:*:*:*:*
moshe_weitzmanog_vocab6.x-1.xcpe:2.3:a:moshe_weitzman:og_vocab:6.x-1.x:dev:*:*:*:*:*:*
drupaldrupal*cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.004

Percentile

72.2%

Related for NVD:CVE-2009-4528