CVE-2008-1731 | BDVDB-2026-30173 Detail

Description#

The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remote attackers to bypass intended access restrictions, and read or modify nodes, in opportunistic circumstances related to interaction between Simple Access and (1) Node clone or (2) Project issue tracking.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.vupen.com/english/advisories/2008/1184
http://www.osvdb.org/44271
http://www.securityfocus.com/bid/28720
http://drupal.org/node/244560
http://secunia.com/advisories/29772
https://exchange.xforce.ibmcloud.com/vulnerabilities/41756

Exploit#

No public exploit known

History#

Version 12008-04-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.