medium5.0
CVE-2009-4515
The Storm module 6.x before 6.x-1.25 for Drupal does not enforce privilege requirements for storminvoiceitem nodes, which allows remote attackers to read node …
Impact
The Storm module 6.x before 6.x-1.25 for Drupal does not enforce privilege requirements for storminvoiceitem nodes, which allows remote attackers to read node titles via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Speedtech | Storm | Versions 6.x-1.0, 6.x-1.1, 6.x-1.2, 6.x-1.3, 6.x-1.4, 6.x-1.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/617480
- http://drupal.org/node/617494
- http://secunia.com/advisories/37202
- http://www.securityfocus.com/bid/36879
- http://www.vupen.com/english/advisories/2009/3090
- http://drupal.org/node/617480
- http://drupal.org/node/617494
- http://secunia.com/advisories/37202
- http://www.securityfocus.com/bid/36879
- http://www.vupen.com/english/advisories/2009/3090