CVE-2008-1729
N/A
N/A
Summary
The menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers to (1) edit the profile pages of arbitrary users, and obtain sensitive information from (2) tracker and (3) blog pages, related to a missing check for the "access content" permission; and (4) allows remote authenticated users, with administration page view access, to edit content types.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://secunia.com/advisories/29762
- http://www.osvdb.org/44270
- http://drupal.org/node/244637
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41755
- http://www.securityfocus.com/bid/28714
- http://www.vupen.com/english/advisories/2008/1185/references
References
- http://secunia.com/advisories/29762
- http://www.osvdb.org/44270
- http://drupal.org/node/244637
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41755
- http://www.securityfocus.com/bid/28714
- http://www.vupen.com/english/advisories/2008/1185/references
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.