CVE-2008-1729

Published: Apr 11, 2008Modified: Apr 23, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The menu system in Drupal 6 before 6.2 has incorrect menu settings, which allows remote attackers to (1) edit the profile pages of arbitrary users, and obtain sensitive information from (2) tracker and (3) blog pages, related to a missing check for the "access content" permission; and (4) allows remote authenticated users, with administration page view access, to edit content types.

Affected (1)

Products: Drupal: Drupal

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	From 6.0 to 6.2

References (12)

http://drupal.org/node/244637

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/29762

Source: cve@mitre.org

Third Party Advisory

http://www.osvdb.org/44270

Source: cve@mitre.org

Broken Link

http://www.securityfocus.com/bid/28714

Source: cve@mitre.org

PatchThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2008/1185/references

Source: cve@mitre.org

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/41755

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://drupal.org/node/244637

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/29762

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.osvdb.org/44270

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/bid/28714

Source: af854a3a-2127-422b-91ae-364da2661108

PatchThird Party AdvisoryVDB Entry

http://www.vupen.com/english/advisories/2008/1185/references

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/41755

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.