Lucene search
HistoryJun 02, 2014 - 3:55 p.m.
CVE-2013-4596
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
6.7
Confidence
Low
EPSS
0.003
Percentile
67.8%
The Node Access Keys module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permissions, which allows remote attackers to bypass access restrictions via a node listing.
Affected configurations
Node
danielkortenodeaccesskeysMatch7.x-1.0drupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| danielkorte | nodeaccesskeys | 7.x-1.0 | cpe:2.3:a:danielkorte:nodeaccesskeys:7.x-1.0:*:*:*:*:drupal:*:* |
Related
drupal
drupal
SA-CONTRIB-2013-089 - Node Access Keys - Access Bypass
2013-11-06 00:00:00
cve
cve
CVE-2013-4596
2014-06-02 15:55:10
prion
prion
Authentication flaw
2014-06-02 15:55:00
cvelist
cvelist
CVE-2013-4596
2014-06-02 15:00:00
CVSS2
5.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
AI Score
6.7
Confidence
Low
EPSS
0.003
Percentile
67.8%
Related for NVD:CVE-2013-4596