CVE Vulnerabilities

CVE-2009-4558

Published: Jan 04, 2010 | Modified: Aug 17, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors.

Affected Software

Name Vendor Start Version End Version
Img_assist Unleashedmind 5.x-1.0 5.x-1.0
Img_assist Unleashedmind 5.x-1.1 5.x-1.1
Img_assist Unleashedmind 5.x-1.2 5.x-1.2
Img_assist Unleashedmind 5.x-1.3 5.x-1.3
Img_assist Unleashedmind 5.x-1.4 5.x-1.4
Img_assist Unleashedmind 5.x-1.5 5.x-1.5
Img_assist Unleashedmind 5.x-1.6 5.x-1.6
Img_assist Unleashedmind 5.x-1.7 5.x-1.7
Img_assist Unleashedmind 5.x-1.x-dev 5.x-1.x-dev
Img_assist Unleashedmind 5.x-2.0-alpha1 5.x-2.0-alpha1
Img_assist Unleashedmind 5.x-2.0-alpha3 5.x-2.0-alpha3
Img_assist Unleashedmind 5.x-2.x-dev 5.x-2.x-dev
Img_assist Unleashedmind 6.x-1.0 6.x-1.0
Img_assist Unleashedmind 6.x-1.0-beta1 6.x-1.0-beta1
Img_assist Unleashedmind 6.x-1.x-dev 6.x-1.x-dev
Img_assist Unleashedmind 6.x-2.0-alpha2 6.x-2.0-alpha2
Img_assist Unleashedmind 6.x-2.0-alpha3 6.x-2.0-alpha3
Img_assist Unleashedmind 6.x-2.x-dev 6.x-2.x-dev
Img_assist Unleashedmind 6.x-3.x-dev 6.x-3.x-dev

References