CVE-2011-2687

Published: Jul 27, 2011Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Drupal 7.x before 7.3 allows remote attackers to bypass intended node_access restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table.

Affected (18)

Products: Drupal: Drupal

1 product

Configuration A

18 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	Version 7.0
Drupal Drupal	Version 7.0 alpha1
Drupal Drupal	Version 7.0 alpha2
Drupal Drupal	Version 7.0 alpha3
Drupal Drupal	Version 7.0 alpha4
Drupal Drupal	Version 7.0 alpha5
Drupal Drupal	Version 7.0 alpha6
Drupal Drupal	Version 7.0 alpha7
Drupal Drupal	Version 7.0 beta1
Drupal Drupal	Version 7.0 beta2
Drupal Drupal	Version 7.0 beta3
Drupal Drupal	Version 7.0 dev
Drupal Drupal	Version 7.0 rc1
Drupal Drupal	Version 7.0 rc2
Drupal Drupal	Version 7.0 rc3
Drupal Drupal	Version 7.0 rc4
Drupal Drupal	Version 7.1
Drupal Drupal	Version 7.2

Related CWEs

References (20)

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=633385

Source: secalert@redhat.com

http://drupal.org/node/1204582

Source: secalert@redhat.com

PatchVendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062714.html

Source: secalert@redhat.com

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062722.html

Source: secalert@redhat.com

http://secunia.com/advisories/45081

Source: secalert@redhat.com

Vendor Advisory

http://secunia.com/advisories/45291

Source: secalert@redhat.com

Vendor Advisory

http://www.openwall.com/lists/oss-security/2011/07/11/2

Source: secalert@redhat.com

http://www.openwall.com/lists/oss-security/2011/07/12/16

Source: secalert@redhat.com

http://www.securityfocus.com/bid/48505

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=717874

Source: secalert@redhat.com

http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=633385

Source: af854a3a-2127-422b-91ae-364da2661108

http://drupal.org/node/1204582

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062714.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://lists.fedoraproject.org/pipermail/package-announce/2011-July/062722.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/45081

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/45291

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.openwall.com/lists/oss-security/2011/07/11/2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.openwall.com/lists/oss-security/2011/07/12/16

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/48505

Source: af854a3a-2127-422b-91ae-364da2661108

https://bugzilla.redhat.com/show_bug.cgi?id=717874

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.