CVE-2012-1635

The hooknodeaccess function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML...

PT-2012-3400

Name of the Vulnerable Software and Affected Versions Drupal revisioning module versions 7.x-1.x before 7.x-1.3 Description The issue allows remote attackers to bypass intended access restrictions. This is demonstrated when using the XML sitemap module to obtain sensitive information about...

CVE-2012-1635: Undefined Security Weakness

The hooknodeaccess function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML...