CVE-2007-1368: Low severity Drupal Drupal Project Issue Tracking vulnerability
The Project issue tracking module before 4.7.x-1.3, 4.7.x-2. before 4.7.x-2.3, and 5 before 5.x-0.2-beta for Drupal allows remote authenticated users, with "access project issues" permission, to read the contents of a private node via a URL with a modified node identifier.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1368?
CVE-2007-1368 is considered to have a medium severity level due to the potential for unauthorized access to private information.
How do I fix CVE-2007-1368?
To fix CVE-2007-1368, update the Drupal project issue tracking module to version 4.7.x-1.3 or later, or 5.x-0.2-beta or later.
Who is affected by CVE-2007-1368?
Users of the affected versions of the Drupal project issue tracking module who have authenticated access and the 'access project issues' permission are at risk.
What are the affected versions of Drupal for CVE-2007-1368?
The affected versions of Drupal for CVE-2007-1368 include versions before 4.7.x-1.3, 4.7.x-2.x before 4.7.x-2.3, and versions before 5.x-0.2-beta.
What is the nature of the vulnerability in CVE-2007-1368?
CVE-2007-1368 allows remote authenticated users to read the contents of a private node by manipulating the node identifier.