CVEvulnerability
CVE-2014-5179
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-08-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
The freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote attackers to obtain sensitive information via a crafted link.
Affected configurations
• freelinking for case tracker project freelinking for case tracker
• freelinking project freelinking
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/68861 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94870 exchange.xforce.ibmcloud.com
- https://www.drupal.org/node/2308503 Vendor Advisory
- http://www.securityfocus.com/bid/68861 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94870 exchange.xforce.ibmcloud.com
- https://www.drupal.org/node/2308503 Vendor Advisory