CVE-2013-4597

{"id": "CVE-2013-4597", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-06-09T19:55:09.537", "references": [{"url": "http://seclists.org/oss-sec/2013/q4/317", "source": "secalert@redhat.com"}, {"url": "https://drupal.org/node/2133555", "tags": ["Patch"], "source": "secalert@redhat.com"}, {"url": "https://drupal.org/node/2135257", "tags": ["Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "http://seclists.org/oss-sec/2013/q4/317", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://drupal.org/node/2133555", "tags": ["Patch"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://drupal.org/node/2135257", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The Revisioning module 7.x-1.x before 7.x-1.6 for Drupal does not properly check node access permissions for content marked unpublished by the Scheduled module, which allows remote authenticated users to obtain sensitive information via unspecified vectors."}, {"lang": "es", "value": "El m\u00f3dulo Revisioning 7.x-1.x anterior a 7.x-1.6 para Drupal no comprueba debidamente permisos de acceso a nodos para contenidos marcados como no publicados por el m\u00f3dulo Scheduled, lo que permite a usuarios remotos autenticados obtener informaci\u00f3n sensible a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-11-21T01:55:54.330", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DF52E04C-FA27-4A40-8C65-E3195EFDDBAD"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:alpha1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB103093-A42E-42BF-99F6-87E7CFC8B202"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:alpha2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B3FBBCE5-CBE9-44C2-968B-4AC9C3C9BEFE"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:alpha3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BB069EF-CF7C-4E09-A710-C3526E0439B9"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:alpha4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39C15145-C442-4DB1-944D-8CAC20D475C6"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:alpha5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5499411-30C0-49AE-A86A-0CAE4776EEC0"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:beta1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "050AE8CD-38A6-422F-BF37-91562EBA1753"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:beta10:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2126DE43-B110-4091-BF89-89B19A65FFC8"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:beta11:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39A44978-D60E-4BC8-8686-D37DB1A11E8B"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:beta2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "88A49A47-BED7-4316-BDB0-B861AF4ACF1A"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:beta3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DFD9AD40-89F5-45AE-B4A5-090F39E510E0"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:beta4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BFCF6DBC-9791-424B-BC65-DC5C990F9C83"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:beta5:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "05AEB8FF-3D71-43F0-B315-B85A8088B45B"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:beta6:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CE0BAD57-71F6-4D5C-B586-9BFF96A6538C"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:beta7:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7CD6834-3118-4609-8F30-3D539DE57F12"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:beta8:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B10F2925-F3D6-4221-8925-92D1DD9CA6F0"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.0:beta9:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "437992A2-01B5-4A8C-ABE5-3E7E575FA19F"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CA56AC18-8534-4A52-8DA8-1295BD42FC77"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9F878269-B46B-4FF1-9064-8418878C3716"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3E3076D2-BA31-4F4C-875F-8A0B2042C2AB"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F28A0F7B-B742-4BB6-BDAA-44780760A4A6"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A1B00182-6B47-45E2-8724-3DE4F3CE6E71"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.x:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "83906B05-3E19-4B71-994A-2EBCB8792074"}, {"criteria": "cpe:2.3:a:rik_de_boer:revisioning:7.x-1.x:dev:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3AEFC2CF-4875-45FC-836A-A7B273CDAE1F"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}