CVEvulnerability
CVE-2013-4597
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-06-09
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access permissions for content marked unpublished by the Scheduled module, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Affected configurations
• rik de boer revisioning 7.x-1.0
• rik de boer revisioning 7.x-1.1
• rik de boer revisioning 7.x-1.2
• rik de boer revisioning 7.x-1.3
• rik de boer revisioning 7.x-1.4
• rik de boer revisioning 7.x-1.5
• rik de boer revisioning 7.x-1.x
Related
Weakness · not in database (1)
References
- http://seclists.org/oss-sec/2013/q4/317 seclists.org
- https://drupal.org/node/2133555 Patch
- https://drupal.org/node/2135257 Vendor Advisory
- http://seclists.org/oss-sec/2013/q4/317 seclists.org
- https://drupal.org/node/2133555 Patch
- https://drupal.org/node/2135257 Vendor Advisory