2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2009-4558" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2010-01-04T21:30:00.467" ,
2024-11-22 11:14:00 +00:00
"lastModified" : "2024-11-21T01:09:54.997" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-12-08 03:06:42 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors."
} ,
{
"lang" : "es" ,
"value" : "El m\u00f3dulo Image Assist v5.x-1.x anterior a v5.x-1.8, v5.x-2.x anterior a v2.0-alpha4, v6.x-1.x anterior a v6.x-1.1, v6.x-2.x anterior a v2.0-alpha4, y v6.x-3.x-dev anterior a v2009-07-15, para Drupal, no refuerza adecuadamente los requisitos de algunos privilegios para p\u00e1ginas que no se han especificado, lo que permite a atacantes remotos leer el (1)t\u00edtulo (title) o (2)cuerpo (body) de un nodo de su elecci\u00f3n a trav\u00e9s de vectores no especificados."
}
] ,
"metrics" : {
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:P/I:N/A:N" ,
2024-11-22 11:14:00 +00:00
"baseScore" : 5.0 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "PARTIAL" ,
"integrityImpact" : "NONE" ,
2024-11-22 11:14:00 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-264"
}
]
}
] ,
"configurations" : [
{
"operator" : "AND" ,
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-1.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CA586D8B-FA89-4880-AD95-472C604C8A41"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-1.1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C0D361CB-2021-4FAF-ACB4-F3C7DFFB9309"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-1.2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D4CB7965-B4E6-42E8-8E49-16B9A764569B"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-1.3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "F1050F8C-FB50-42EB-8D0F-B7F2D3351A0F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-1.4:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "13AB7445-036F-452B-AA29-9DE1EAB24312"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-1.5:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CDAF3C12-B207-4397-97A8-30BF1CE99E46"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-1.6:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "C2212E10-59C9-464B-A8EE-75D4A2EC1A12"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-1.7:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "69D8A4FF-F45E-48EC-A266-C3970D5E0906"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-1.x-dev:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "BEF261EE-6E9B-40B7-9FC9-098D48D8F9ED"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-2.0-alpha1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0C8CA7DB-B44D-4D9C-A685-24D579B92F28"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-2.0-alpha3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "0AEC6601-4359-4921-88C8-6F8C2AE749B9"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:5.x-2.x-dev:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "72DB3A51-4F11-44BF-BBD6-D48CDABA4FD3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:6.x-1.0:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "499963D0-0409-4E1E-9EE7-A303C0D4A123"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:6.x-1.0-beta1:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "CF997DA0-97C5-4FA8-AB98-7E1A3FBEFF3C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:6.x-1.x-dev:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "6FE5DE74-0819-41E1-AFDD-E9BE5115ACC4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:6.x-2.0-alpha2:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "144CC081-8855-4808-9AF3-CC80164DA00F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:6.x-2.0-alpha3:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "2A19CC33-3306-46EA-A2E3-3A4678FB69B8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:6.x-2.x-dev:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "D5013EDA-D0E9-41F4-8687-E26B0125A2C3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:unleashedmind:img_assist:6.x-3.x-dev:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "ABFE72D5-38C6-4252-BBEE-5380A7EE7BD1"
}
]
} ,
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : false ,
"criteria" : "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*" ,
"matchCriteriaId" : "799CA80B-F3FA-4183-A791-2071A7DA1E54"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://drupal.org/node/520564" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
2024-04-04 08:46:00 +00:00
{
"url" : "http://osvdb.org/55867" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "http://secunia.com/advisories/35879" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
} ,
2023-04-24 12:24:31 +02:00
{
"url" : "http://www.securityfocus.com/bid/35710" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51787" ,
"source" : "cve@mitre.org"
2024-11-22 11:14:00 +00:00
} ,
{
"url" : "http://drupal.org/node/520564" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch" ,
"Vendor Advisory"
]
} ,
{
"url" : "http://osvdb.org/55867" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "http://secunia.com/advisories/35879" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/35710" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Patch"
]
} ,
{
"url" : "https://exchange.xforce.ibmcloud.com/vulnerabilities/51787" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
2023-04-24 12:24:31 +02:00
}
]
}
