CVEvulnerability
CVE-2014-1476
4.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-01-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.0 MEDIUM — AV:N/AC:L/Au:S/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The Taxonomy module in Drupal 7.x before 7.26, when upgraded from an earlier version of Drupal, does not properly restrict access to unpublished content, which allows remote authenticated users to obtain sensitive information via a listing page.
Affected configurations
• drupal drupal 7.0
• drupal drupal 7.1
• drupal drupal 7.2
• drupal drupal 7.10
• drupal drupal 7.11
• drupal drupal 7.12
• drupal drupal 7.13
• drupal drupal 7.14
• drupal drupal 7.15
• drupal drupal 7.16
• drupal drupal 7.17
• drupal drupal 7.18
• drupal drupal 7.19
• drupal drupal 7.20
• drupal drupal 7.21
• drupal drupal 7.22
• drupal drupal 7.23
• drupal drupal 7.24
Related
Weakness · not in database (1)
References
- http://secunia.com/advisories/56260 Vendor Advisory
- http://www.debian.org/security/2014/dsa-2847 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:031 www.mandriva.com
- http://www.securityfocus.com/bid/64973 www.securityfocus.com
- https://drupal.org/SA-CORE-2014-001 drupal.org
- http://secunia.com/advisories/56260 Vendor Advisory
- http://www.debian.org/security/2014/dsa-2847 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:031 www.mandriva.com
- http://www.securityfocus.com/bid/64973 www.securityfocus.com
- https://drupal.org/SA-CORE-2014-001 drupal.org