CVE-2007-4493

eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:ez:ez_publish:*:*:*:*:*:*:*:*
cpe:2.3:a:ez:ez_publish:3.9.0:*:*:*:*:*:*:*
cpe:2.3:a:ez:ez_publish:3.9.1:*:*:*:*:*:*:*
cpe:2.3:a:ez:ez_publish:3.9.2:*:*:*:*:*:*:*

History

21 Nov 2024, 00:35

Type Values Removed Values Added
References () http://ez.no/community/news/ez_publish_security_fixes_3_9_3_and_3_8_9 - () http://ez.no/community/news/ez_publish_security_fixes_3_9_3_and_3_8_9 -
References () http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_8_to_3_8_9 - () http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_8_to_3_8_9 -
References () http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_9_2_to_3_9_3 - () http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_9_2_to_3_9_3 -
References () http://osvdb.org/40324 - () http://osvdb.org/40324 -
References () http://secunia.com/advisories/26686 - () http://secunia.com/advisories/26686 -
References () http://www.securityfocus.com/bid/25539 - () http://www.securityfocus.com/bid/25539 -

Information

Published : 2007-08-23 01:17

Updated : 2024-11-21 00:35


NVD link : CVE-2007-4493

Mitre link : CVE-2007-4493

CVE.ORG link : CVE-2007-4493


JSON object : View

Products Affected

ez

  • ez_publish