CVE Vulnerabilities

CVE-2012-2153

Published: Oct 01, 2012 | Modified: Dec 13, 2013
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

Drupal 7.x before 7.14 does not properly restrict access to nodes in a list when using a contributed node access module, which allows remote authenticated users with the Access the content overview page permission to read all published nodes by accessing the admin/content page.

Affected Software

Name Vendor Start Version End Version
Drupal Drupal 7.0 (including) 7.0 (including)
Drupal Drupal 7.0-alpha1 (including) 7.0-alpha1 (including)
Drupal Drupal 7.0-alpha2 (including) 7.0-alpha2 (including)
Drupal Drupal 7.0-alpha3 (including) 7.0-alpha3 (including)
Drupal Drupal 7.0-alpha4 (including) 7.0-alpha4 (including)
Drupal Drupal 7.0-alpha5 (including) 7.0-alpha5 (including)
Drupal Drupal 7.0-alpha6 (including) 7.0-alpha6 (including)
Drupal Drupal 7.0-alpha7 (including) 7.0-alpha7 (including)
Drupal Drupal 7.0-beta1 (including) 7.0-beta1 (including)
Drupal Drupal 7.0-beta2 (including) 7.0-beta2 (including)
Drupal Drupal 7.0-beta3 (including) 7.0-beta3 (including)
Drupal Drupal 7.0-dev (including) 7.0-dev (including)
Drupal Drupal 7.0-rc1 (including) 7.0-rc1 (including)
Drupal Drupal 7.0-rc2 (including) 7.0-rc2 (including)
Drupal Drupal 7.0-rc3 (including) 7.0-rc3 (including)
Drupal Drupal 7.0-rc4 (including) 7.0-rc4 (including)
Drupal Drupal 7.1 (including) 7.1 (including)
Drupal Drupal 7.2 (including) 7.2 (including)
Drupal Drupal 7.3 (including) 7.3 (including)
Drupal Drupal 7.4 (including) 7.4 (including)
Drupal Drupal 7.5 (including) 7.5 (including)
Drupal Drupal 7.6 (including) 7.6 (including)
Drupal Drupal 7.7 (including) 7.7 (including)
Drupal Drupal 7.8 (including) 7.8 (including)
Drupal Drupal 7.9 (including) 7.9 (including)
Drupal Drupal 7.10 (including) 7.10 (including)
Drupal Drupal 7.11 (including) 7.11 (including)
Drupal Drupal 7.12 (including) 7.12 (including)
Drupal Drupal 7.13 (including) 7.13 (including)
Drupal Drupal 7.x-dev (including) 7.x-dev (including)
Drupal5 Ubuntu hardy *
Drupal6 Ubuntu lucid *
Drupal6 Ubuntu natty *
Drupal6 Ubuntu oneiric *
Drupal6 Ubuntu precise *
Drupal6 Ubuntu quantal *
Drupal6 Ubuntu raring *
Drupal7 Ubuntu precise *
Drupal7 Ubuntu upstream *

References