PT-2012-3840

Name of the Vulnerable Software and Affected Versions Drupal versions 7.x before 7.14 Description The issue allows remote authenticated users with the "Access the content overview page" permission to read all published nodes by accessing the admin/content page, due to improper access restriction ...

CVE-2012-2153: Undefined Security Weakness

Drupal 7.x before 7.14 does not properly restrict access to nodes in a list when using a "contributed node access module," which allows remote authenticated users with the "Access the content overview page" permission to read all published nodes by accessing the admin/content page...