CVE-2008-2771

The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remote attackers with "access content" permissions to bypass restrictions and modify the node hierarchy via unspecified attack vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2008-06-18

Last modified

2024-08-07

Weaknesses

CWE-264

Affected products

• Drupal (Drupal)
• Node Hierarchy Module (Drupal)

References

• http://drupal.org/node/269473
• http://secunia.com/advisories/30622
• http://www.securityfocus.com/bid/29675
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43006