4 matches found
CVE-2012-4473
The Restrict node page view module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "view any node page" or "view any node type page" permission to access unpublished nodes via a direct request...
PT-2012-5421
Name of the Vulnerable Software and Affected Versions Restrict node page view module versions 7.x-1.x before 7.x-1.2 Description The issue allows remote authenticated users with the view any node page or view any node type page permission to access unpublished nodes via a direct request...
CVE-2012-4473: Undefined Security Weakness
The Restrict node page view module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users with the "view any node page" or "view any node type page" permission to access unpublished nodes via a direct request...
SA-CONTRIB-2012-109 - Restrict node page view - Access bypass
This module enables you to disable direct access to node pages node/XXX based on nodetypes and permissions. The module issues a NODEACCESSALLOW if it's permissions are met, but does not respect the "administer nodes" or "access own unpublished content" permissions. The consequence is that this...