CVE-2008-3000

Published Jul 3, 2008

Last updated 8 years ago

CVSS info 6.8

Overview

Description: The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 6.8
Impact score: 6.4
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: CWE-264

Hype score: Not currently trending

Evaluator

Comment: -
Impact: Per Hyperlink Record 1026625, Drupal core is not affected. If you do not use the contributed Aggregation module, there is nothing you need to do.
Solution: Per Hyperlink Record 1026625, Drupal core is not affected. If you do not use the contributed Aggregation module, there is nothing you need to do.

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:drupal:aggregation_module:3.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8CF7A917-F319-4C29-A843-99A36B4A83B5"
          },
          {
            "criteria": "cpe:2.3:a:drupal:aggregation_module:3.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A64D861C-D011-4CE6-B7C6-EEB4D7CCDC81"
          },
          {
            "criteria": "cpe:2.3:a:drupal:aggregation_module:3.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4CA6032D-27F3-4D80-8714-7F3ACA2E8836"
          },
          {
            "criteria": "cpe:2.3:a:drupal:aggregation_module:4.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4D6F71C3-0DCB-418A-8FD4-072D49CF9945"
          },
          {
            "criteria": "cpe:2.3:a:drupal:aggregation_module:4.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F16FEA3A-265F-4332-A1A1-2879CA5682CC"
          },
          {
            "criteria": "cpe:2.3:a:drupal:aggregation_module:4.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C57C2C4F-F4EC-4A25-841D-8597EB1582B9"
          },
          {
            "criteria": "cpe:2.3:a:drupal:aggregation_module:4.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E8D028E-51F2-4BE9-99F3-85D1BE440FA7"
          },
          {
            "criteria": "cpe:2.3:a:drupal:aggregation_module:5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "35595D9F-0DBB-45BF-86A8-6548FFBB588D"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Risk scores

CVSS 2.0

Weaknesses

Social media

Evaluator

Configurations

References