Lucene search

[email protected]NVD:CVE-2014-1476

HistoryJan 24, 2014 - 6:55 p.m.

CVE-2014-1476

2014-01-2418:55:05

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

AI Score

5.5

Confidence

Low

EPSS

0.002

Percentile

56.3%

JSON

The Taxonomy module in Drupal 7.x before 7.26, when upgraded from an earlier version of Drupal, does not properly restrict access to unpublished content, which allows remote authenticated users to obtain sensitive information via a listing page.

Affected configurations

Nvd

Node

drupaldrupalMatch7.0

drupaldrupalMatch7.0alpha1

drupaldrupalMatch7.0alpha2

drupaldrupalMatch7.0alpha3

drupaldrupalMatch7.0alpha4

drupaldrupalMatch7.0alpha5

drupaldrupalMatch7.0alpha6

drupaldrupalMatch7.0alpha7

drupaldrupalMatch7.0beta1

drupaldrupalMatch7.0beta2

drupaldrupalMatch7.0beta3

drupaldrupalMatch7.0dev

drupaldrupalMatch7.0rc1

drupaldrupalMatch7.0rc2

drupaldrupalMatch7.0rc3

drupaldrupalMatch7.0rc4

drupaldrupalMatch7.1

drupaldrupalMatch7.2

drupaldrupalMatch7.10

drupaldrupalMatch7.11

drupaldrupalMatch7.12

drupaldrupalMatch7.13

drupaldrupalMatch7.14

drupaldrupalMatch7.15

drupaldrupalMatch7.16

drupaldrupalMatch7.17

drupaldrupalMatch7.18

drupaldrupalMatch7.19

drupaldrupalMatch7.20

drupaldrupalMatch7.21

drupaldrupalMatch7.22

drupaldrupalMatch7.23

drupaldrupalMatch7.24

VendorProductVersionCPE
drupaldrupal7.0cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*
drupaldrupal7.0cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*
drupaldrupal7.0cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*
drupaldrupal7.0cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*
drupaldrupal7.0cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*
drupaldrupal7.0cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*
drupaldrupal7.0cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*
drupaldrupal7.0cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*
drupaldrupal7.0cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*
drupaldrupal7.0cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*

Vendor	Product	Version	CPE
drupal	drupal	7.0	cpe:2.3:a:drupal:drupal:7.0:::::::*
drupal	drupal	7.0	cpe:2.3:a:drupal:drupal:7.0:alpha1::::::
drupal	drupal	7.0	cpe:2.3:a:drupal:drupal:7.0:alpha2::::::
drupal	drupal	7.0	cpe:2.3:a:drupal:drupal:7.0:alpha3::::::
drupal	drupal	7.0	cpe:2.3:a:drupal:drupal:7.0:alpha4::::::
drupal	drupal	7.0	cpe:2.3:a:drupal:drupal:7.0:alpha5::::::
drupal	drupal	7.0	cpe:2.3:a:drupal:drupal:7.0:alpha6::::::
drupal	drupal	7.0	cpe:2.3:a:drupal:drupal:7.0:alpha7::::::
drupal	drupal	7.0	cpe:2.3:a:drupal:drupal:7.0:beta1::::::
drupal	drupal	7.0	cpe:2.3:a:drupal:drupal:7.0:beta2::::::