CVE-2008-0275

Published: Jan 15, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Atom 4.7 before 4.7.x-1.0 and 5.x before 5.x-1.0 module for Drupal does not properly manage permissions for node (1) titles, (2) teasers, and (3) bodies, which might allow remote attackers to gain access to syndicated content.

Affected (2)

Products: Drupal: Atom Module

Drupal

1 product

Atom Module

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Drupal Atom Module	Up to 4.7
Drupal Atom Module	Up to 5.0

Related CWEs

CWE-264

References (4)

http://drupal.org/node/208527

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/39607

Source: cve@mitre.org

http://drupal.org/node/208527

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/39607

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.