CVE-2008-3000 The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions.
MediumCVSS 6.8
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal aggregation module | = 3.0 | No fix listed |
| drupal aggregation module | = 3.1 | No fix listed |
| drupal aggregation module | = 3.2 | No fix listed |
| drupal aggregation module | = 4.0 | No fix listed |
| drupal aggregation module | = 4.1 | No fix listed |
| drupal aggregation module | = 4.2 | No fix listed |
| drupal aggregation module | = 4.3 | No fix listed |
| drupal aggregation module | = 5 | No fix listed |
References
- drupal.org patch
- 30618 third-party-advisory vendor-advisory
- 29677 vdb-entry
- aggregation-access-security-bypass(43017) vdb-entry