CVE-2008-4791

Published: Oct 29, 2008Modified: Apr 23, 2026

6.0

Vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Exploitability: 6.8 / Impact: 6.4

Source: NVD

Description

The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended login access rules and successfully login via unknown vectors.

Affected (2)

Products: Drupal: Drupal

Drupal

1 product

Drupal

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	From 5.0 to 5.11
Drupal Drupal	From 6.0 to 6.5

Related CWEs

CWE-264

References (8)

http://drupal.org/node/318706

Source: cve@mitre.org

PatchVendor Advisory

http://secunia.com/advisories/32201

Source: cve@mitre.org

Third Party Advisory

http://www.openwall.com/lists/oss-security/2008/10/21/7

Source: cve@mitre.org

Mailing ListThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/45766

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://drupal.org/node/318706

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/32201

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.openwall.com/lists/oss-security/2008/10/21/7

Source: af854a3a-2127-422b-91ae-364da2661108

Mailing ListThird Party Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/45766

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

Timeline

No history available yet.