CVE-2013-4273: Undefined Security Weakness

The Entity API module 7.x-1.x before 7.x-1.2 for Drupal does not properly restrict access to node comments, which allows remote authenticated users to read the comments via unspecified vectors. NOTE: this identifier was SPLIT per ADT5 due to different researcher organizations. CVE-2013-7391 was...

PT-2014-3414

Name of the Vulnerable Software and Affected Versions Entity API module versions 7.x-1.x before 7.x-1.2 for Drupal Description The issue allows remote attackers to read restricted entities via the field, header, or footer of a View when using the Views field or area plugins. Recommendations For...

PT-2014-2768

Name of the Vulnerable Software and Affected Versions Entity API module versions 7.x-1.x through 7.x-1.1 Description The issue allows remote authenticated users to read node comments via unspecified vectors due to improper access restriction. Recommendations For Entity API module versions 7.x-1.x...

Fedora Update for drupal7-entity FEDORA-2014-0509

Check for the Version of drupal7-entity OpenVAS Vulnerability Test Fedora Update for drupal7-entity FEDORA-2014-0509 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Fedora Update for drupal7-entity FEDORA-2014-0508

Check for the Version of drupal7-entity OpenVAS Vulnerability Test Fedora Update for drupal7-entity FEDORA-2014-0508 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

[SECURITY] Fedora 20 Update: drupal7-entity-1.3-1.fc20

This module extends the entity API of Drupal core in order to provide a uni fied way to deal with entities and their properties. Additionally, it provides an entity CRUD controller, which helps simplifying the creation of new entity types...

SA-CONTRIB-2014-001 - Entity API - Access Bypass

The Entity API module extends the entity API of Drupal core in order to provide a unified way to deal with entities and their properties. Comment, User and Node Statistics property access bypass CVE-2014-1398 The module's entity wrapper access API doesn't sufficiently protect comment, user and no...

[SECURITY] Fedora 18 Update: drupal7-entity-1.2-1.fc18

This module extends the entity API of Drupal core in order to provide a uni fied way to deal with entities and their properties. Additionally, it provides an entity CRUD controller, which helps simplifying the creation of new entity types...

[SECURITY] Fedora 19 Update: drupal7-entity-1.2-1.fc19

This module extends the entity API of Drupal core in order to provide a uni fied way to deal with entities and their properties. Additionally, it provides an entity CRUD controller, which helps simplifying the creation of new entity types...

SA-CONTRIB-2013-068 - Entity API - Access Bypass

The Entity API module extends the entity API of Drupal core in order to provide a unified way to deal with entities and their properties. The module doesn't sufficiently enforce node access restrictions when checking for a user's access to view a comment associated with a particular node. The...