Access control issue in ezsystems/ezpublish-kernel

Access control based on object state is mishandled. This is a policy you can use in your roles to limit access to content based on specific object state values. Due to a flawed earlier update, these limitations were ineffective in releases made since February 16th 2022. They would grant access to...

PT-2022-28251

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description A flawed update made object state limitations ineffective in releases since February 16th, 2022, allowing access to content regardless of the object state. The issue's severity depends on th...

PT-2022-28284

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description A flawed update made object state limitations ineffective, granting access to content regardless of the object state. This issue is critical for users who rely on object state limitations in...

PT-2022-28204

Name of the Vulnerable Software and Affected Versions Software affected versions not specified Description A flawed update made object state limitations ineffective in releases since February 16th, 2022, allowing access to content regardless of the object state. The issue's severity depends on th...