CVE-2012-1635

The hooknodeaccess function in the revisioning module 7.x-1.x before 7.x-1.3 for Drupal checks the permissions of the current user even when it is called to check permissions of other users, which allows remote attackers to bypass intended access restrictions, as demonstrated when using the XML...

CVE-2012-1635

The CVE-2012-1635 issue affects the Drupal Revisioning module (7.x-1.x) prior to 7.x-1.3. The hook_node_access() implementation checks the current user’s permissions even when evaluating access for other user accounts, enabling bypass of intended access restrictions (notably demonstrated via the ...

SA-CONTRIB-2012-009 - Revisioning - Access bypass

CVE: CVE-2012-1635 This module enables you to create moderation publication workflows, allowing authors to create content that isn't visible to the public until it has been approved by a moderator/publisher. The module's implementation of hooknodeaccess assumes that access is to granted/denied...