CVE-2008-3000: Medium severity drupal aggregation module vulnerability

Published Jul 3, 2008

Updated

The Aggregation module 5.x before 5.x-4.4 for Drupal, when node access modules are used, does not properly implement access control, which allows remote attackers to bypass intended restrictions.

Affected Software

8 affected components

Drupal Aggregation module=5

Drupal Aggregation module=3.2

Drupal Aggregation module=4.0

Drupal Aggregation module=4.1

Drupal Aggregation module=4.3

Drupal Aggregation module=4.2

Drupal Aggregation module=3.1

Drupal Aggregation module=3.0

Remediation

Patch Available

http://drupal.org/node/269479

Event History

Jul 3, 2008

CVE Published

via MITRE·05:47 PM

Data Sourced

via MITRE·05:47 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3000?

CVE-2008-3000 is considered a critical vulnerability due to its ability to allow remote attackers to bypass access controls.

How do I fix CVE-2008-3000?

To fix CVE-2008-3000, upgrade the Aggregation module to version 5.x-4.4 or later.

What versions of the Aggregation module are affected by CVE-2008-3000?

CVE-2008-3000 affects Drupal Aggregation module versions 3.x, 4.x, and 5.x prior to their respective patched releases.

What impact does CVE-2008-3000 have on my Drupal site?

CVE-2008-3000 could allow unauthorized users to access restricted content, compromising the integrity of your site's security.

Is there any workaround for CVE-2008-3000?

There are no known effective workarounds for CVE-2008-3000, upgrading to the fixed version is strongly recommended.