CVE-2008-1731: High severity drupal vulnerability
The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remote attackers to bypass intended access restrictions, and read or modify nodes, in opportunistic circumstances related to interaction between Simple Access and (1) Node clone or (2) Project issue tracking.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
Which deployments are exposed to this issue?
Drupal installations using the Simple Access module in the affected 5.x through 5.x-1.2-2 range are exposed, particularly where Node clone or Project issue tracking interacts with Simple Access privacy handling.
What access does an attacker need?
The issue can be exploited remotely and does not require authentication, according to the provided attack vector. Successful exploitation may allow reading or modifying nodes despite intended access restrictions.
Is a fix available?
Yes. A patch is available.