CVE-2009-4515

Published: Dec 31, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Storm module 6.x before 6.x-1.25 for Drupal does not enforce privilege requirements for storminvoiceitem nodes, which allows remote attackers to read node titles via unspecified vectors.

Affected (26)

Products: Speedtech: Storm

Speedtech

1 product

Storm

Configuration A

26 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Speedtech Storm	Version 6.x-1.0
Speedtech Storm	Version 6.x-1.10
Speedtech Storm	Version 6.x-1.11
Speedtech Storm	Version 6.x-1.12
Speedtech Storm	Version 6.x-1.13
Speedtech Storm	Version 6.x-1.14
Speedtech Storm	Version 6.x-1.15
Speedtech Storm	Version 6.x-1.16
Speedtech Storm	Version 6.x-1.17
Speedtech Storm	Version 6.x-1.18
Speedtech Storm	Version 6.x-1.19
Speedtech Storm	Version 6.x-1.1
Speedtech Storm	Version 6.x-1.20
Speedtech Storm	Version 6.x-1.21
Speedtech Storm	Version 6.x-1.22
Speedtech Storm	Version 6.x-1.23
Speedtech Storm	Version 6.x-1.24
Speedtech Storm	Version 6.x-1.2
Speedtech Storm	Version 6.x-1.3
Speedtech Storm	Version 6.x-1.4
Speedtech Storm	Version 6.x-1.5
Speedtech Storm	Version 6.x-1.6
Speedtech Storm	Version 6.x-1.7
Speedtech Storm	Version 6.x-1.8
Speedtech Storm	Version 6.x-1.9
Speedtech Storm	Version 6.x-1.x dev