CVE-2005-3974
Published Dec 3, 2005
Last updated 6 years ago
Overview
- Description
- Drupal 4.5.0 through 4.5.5 and 4.6.0 through 4.6.3, when running on PHP5, does not correctly enforce user privileges, which allows remote attackers to bypass the "access user profiles" permission.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 6.4
- Impact score
- 4.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:P/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:drupal:4.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1BD40E38-71BA-42AD-BEBB-D4AD05ADDF6A"
},
{
"criteria": "cpe:2.3:a:drupal:drupal:4.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "82317650-F136-446D-904D-354B4D26E91B"
},
{
"criteria": "cpe:2.3:a:drupal:drupal:4.5.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "06A1ACAF-A468-43F0-9FAD-FA3D48363843"
},
{
"criteria": "cpe:2.3:a:drupal:drupal:4.5.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A68656D9-3EA0-4749-AF1B-2F9B485A02ED"
},
{
"criteria": "cpe:2.3:a:drupal:drupal:4.5.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BFEDAA48-3F53-4B13-BB6A-CDC63E3922A5"
},
{
"criteria": "cpe:2.3:a:drupal:drupal:4.5.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6946291-0F27-4666-95C8-E744800D3EFB"
},
{
"criteria": "cpe:2.3:a:drupal:drupal:4.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46D3F002-92E8-4CBB-8A1D-F8BCD2F782E4"
},
{
"criteria": "cpe:2.3:a:drupal:drupal:4.6.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "FC5ACB7E-0CEB-4417-839A-8B06615FC981"
},
{
"criteria": "cpe:2.3:a:drupal:drupal:4.6.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "35BD7D35-AA9D-4589-A6BC-6D34219B7128"
},
{
"criteria": "cpe:2.3:a:drupal:drupal:4.6.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "611B9D43-CE88-4451-A27C-7F6F24016B4F"
}
],
"operator": "OR"
}
]
}
]