{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-01-23T00:00:00", "descriptions": [{"lang": "en", "value": "The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue information via direct requests."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-28T12:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "23887", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/23887"}, {"name": "22224", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/22224"}, {"name": "32135", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/32135"}, {"name": "ADV-2007-0312", "tags": ["vdb-entry", "x_refsource_VUPEN"], "url": "http://www.vupen.com/english/advisories/2007/0312"}, {"tags": ["x_refsource_CONFIRM"], "url": "http://drupal.org/node/112146"}, {"name": "projecttracking-access-info-disclosure(31727)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31727"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-0506", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue information via direct requests."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "23887", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/23887"}, {"name": "22224", "refsource": "BID", "url": "http://www.securityfocus.com/bid/22224"}, {"name": "32135", "refsource": "OSVDB", "url": "http://osvdb.org/32135"}, {"name": "ADV-2007-0312", "refsource": "VUPEN", "url": "http://www.vupen.com/english/advisories/2007/0312"}, {"name": "http://drupal.org/node/112146", "refsource": "CONFIRM", "url": "http://drupal.org/node/112146"}, {"name": "projecttracking-access-info-disclosure(31727)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31727"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T12:19:30.350Z"}, "title": "CVE Program Container", "references": [{"name": "23887", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/23887"}, {"name": "22224", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/22224"}, {"name": "32135", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/32135"}, {"name": "ADV-2007-0312", "tags": ["vdb-entry", "x_refsource_VUPEN", "x_transferred"], "url": "http://www.vupen.com/english/advisories/2007/0312"}, {"tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "http://drupal.org/node/112146"}, {"name": "projecttracking-access-info-disclosure(31727)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31727"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-0506", "datePublished": "2007-01-26T00:00:00", "dateReserved": "2007-01-25T00:00:00", "dateUpdated": "2024-08-07T12:19:30.350Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:drupal:project:4.6:*:*:*:*:*:*:*", "matchCriteriaId": "FAD68C3C-298C-41C6-BC6E-D25EBCDAA11D", "vulnerable": true}, {"criteria": "cpe:2.3:a:drupal:project:4.6_1.1:*:*:*:*:*:*:*", "matchCriteriaId": "CDC8AB64-19E1-4F38-994F-971E1B6268F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:drupal:project:4.7:*:*:*:*:*:*:*", "matchCriteriaId": "E105AA85-FA71-45D1-A7A2-6C07FFEA452D", "vulnerable": true}, {"criteria": "cpe:2.3:a:drupal:project:4.7_1.1:*:*:*:*:*:*:*", "matchCriteriaId": "FE28E558-D90C-49E8-A472-7A37FBB49F4C", "vulnerable": true}, {"criteria": "cpe:2.3:a:drupal:project:4.7_2.1:*:*:*:*:*:*:*", "matchCriteriaId": "BBE32A77-7098-4E5B-8B85-E6B8930D1FAC", "vulnerable": true}, {"criteria": "cpe:2.3:a:drupal:project:5.0:*:dev:*:*:*:*:*", "matchCriteriaId": "F6D3BE9B-7223-403A-90F4-39AE94DE7EB2", "vulnerable": true}, {"criteria": "cpe:2.3:a:drupal:project_issue_tracking_module:4.7:*:*:*:*:*:*:*", "matchCriteriaId": "80E74B2F-1EB1-462D-B970-339C8817C229", "vulnerable": true}, {"criteria": "cpe:2.3:a:drupal:project_issue_tracking_module:4.7_1.1:*:*:*:*:*:*:*", "matchCriteriaId": "B7813534-EA9B-4A5E-B84E-D0D353EE9719", "vulnerable": true}, {"criteria": "cpe:2.3:a:drupal:project_issue_tracking_module:4.7_2.1:*:*:*:*:*:*:*", "matchCriteriaId": "41B5AE16-B0D6-4E65-86BF-82EA5CD6F1B5", "vulnerable": true}, {"criteria": "cpe:2.3:a:drupal:project_issue_tracking_module:5.0:*:dev:*:*:*:*:*", "matchCriteriaId": "4A79A0F8-29F0-4393-8A44-83E804BC38EE", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The project_issue_access function in the Project issue tracking 4.7.0 through 5.x before 20070123 module for Drupal allows remote authenticated users to bypass other access control modules and obtain attached files by guessing the filename, and obtain issue information via direct requests."}, {"lang": "es", "value": "La funci\u00f3n project_issue_access en el seguimiento de asuntos de Project 4.7.0 hasta 5.x versiones anteriores a 20070123, m\u00f3dulo para Drupal, permite a usuarios remotos autenticados evitar otros m\u00f3dulos de control de acceso y obtener ficheros adjuntos averiguando el nombre de fichero, y obtener informaci\u00f3n de asuntos mediante peticiones directas."}], "id": "CVE-2007-0506", "lastModified": "2017-07-29T01:30:14.203", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "SINGLE", "availabilityImpact": "PARTIAL", "baseScore": 6.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 6.8, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": true, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-01-26T00:28:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Patch", "Vendor Advisory"], "url": "http://drupal.org/node/112146"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/32135"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/23887"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/22224"}, {"source": "cve@mitre.org", "url": "http://www.vupen.com/english/advisories/2007/0312"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/31727"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}