Lucene search
Ubuntu.comUB:CVE-2014-5020HistoryJul 22, 2014 - 12:00 a.m.
CVE-2014-5020
2014-07-2200:00:00
ubuntu.com
ubuntu.com
6
4.9 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
41.0%
The File module in Drupal 7.x before 7.29 does not properly check
permissions to view files, which allows remote authenticated users with
certain permissions to bypass intended restrictions and read files by
attaching the file to content with a file field.
Related
prion
prion
Design/Logic Flaw
2014-07-22 14:55:00
debiancve
debiancve
CVE-2014-5020
2014-07-22 14:55:00
cve
cve
CVE-2014-5020
2014-07-22 14:55:00
fedora
fedora
[SECURITY] Fedora 19 Update: drupal7-7.29-1.fc19
2014-07-29 02:09:51
[SECURITY] Fedora 20 Update: drupal7-7.29-1.fc20
2014-07-29 02:07:00
nessus
nessus
Debian DSA-2983-1 : drupal7 - security update
2014-07-21 00:00:00
Fedora 20 : drupal7-7.29-1.fc20 (2014-8485)
2014-07-29 00:00:00
Fedora 19 : drupal7-7.29-1.fc19 (2014-8515)
2014-07-29 00:00:00
drupal
drupal
SA-CORE-2014-003 - Drupal core - Multiple vulnerabilities
2014-07-16 00:00:00
openvas
openvas
Debian Security Advisory DSA 2983-1 (drupal7 - security update)
2014-07-20 00:00:00
Fedora Update for drupal7 FEDORA-2014-8485
2014-08-05 00:00:00
Fedora Update for drupal7 FEDORA-2014-8515
2014-08-05 00:00:00
mageia
mageia
Updated drupal packages fix security vulnerabilities
2014-08-07 21:01:33
securityvulns
securityvulns
[ MDVSA-2015:181 ] drupal
2015-05-12 00:00:00
4.9 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:S/C:P/I:P/A:N
0.001 Low
EPSS
Percentile
41.0%
Related for UB:CVE-2014-5020