CVE-2013-0226

{"id": "CVE-2013-0226", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2013-03-19T14:55:02.690", "references": [{"url": "http://www.openwall.com/lists/oss-security/2013/01/25/4", "source": "secalert@redhat.com"}, {"url": "https://drupal.org/node/1896752", "source": "secalert@redhat.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-264"}]}], "descriptions": [{"lang": "en", "value": "The Keyboard Shortcut Utility module 7.x-1.x before 7.x-1.1 for Drupal does not properly check node restrictions, which allows (1) remote authenticated users with the \"view shortcuts\" permission to read nodes or (2) remote authenticated users with the \"admin shortcuts\" permission to read, edit, or delete nodes via unspecified vectors."}, {"lang": "es", "value": "El m\u00f3dulo Keyboard Shortcut Utility v7.x-1.x anterior a v7.x-1.1 para Drupal no comprueba correctamente las restricciones de nodos, lo que permite (1) a usuarios remotos autenticados con el permiso \"vista de accesos directos\" para leer los nodos o (2) usuarios remotos autenticados con los permisos para leer \"atajos admin\", editar o eliminar nodos a trav\u00e9s de vectores no especificados."}], "lastModified": "2013-03-21T14:45:15.390", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:zugec_ivan:keyboard_shortcut_utility:7.x-1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0D92572-8B48-4709-AAB9-E3801C2079E4"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}