CVE-2009-2237
Severity Score
7.5
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Unspecified vulnerability in Views Bulk Operations 5.x-1.x before 5.x-1.4 and 6.x-1.x before 6.x-1.7, a module for Drupal, allows remote attackers to bypass intended access restrictions and modify "nodes or classes of nodes" via unknown vectors, probably related to registered procedures (aka actions).
Vulnerabilidad no especificada en Views Bulk Operations 5.x-1.x antes de 5.x-1.4 y 6.x-1.x ante de 6.x-1.7, un modulo para Drupal, permite a atacantes remotos evitar las restricciones de acceso previstas y modificar "nodos o clases de nodos" mediante vectores desconocidos, probablemente relacionado con procedimientos registrados (alias acciones).
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2009-06-27 CVE Reserved
- 2009-06-27 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-07 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| https://exchange.xforce.ibmcloud.com/vulnerabilities/50659 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://drupal.org/node/468450 | 2017-08-17 | |
| http://www.securityfocus.com/bid/35051 | 2017-08-17 |
| URL | Date | SRC |
|---|---|---|
| http://secunia.com/advisories/35117 | 2017-08-17 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Karim Ratib Search vendor "Karim Ratib" | Views Bulk Operations Search vendor "Karim Ratib" for product "Views Bulk Operations" | 5.x-1.0 Search vendor "Karim Ratib" for product "Views Bulk Operations" and version "5.x-1.0" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karim Ratib Search vendor "Karim Ratib" | Views Bulk Operations Search vendor "Karim Ratib" for product "Views Bulk Operations" | 5.x-1.1 Search vendor "Karim Ratib" for product "Views Bulk Operations" and version "5.x-1.1" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karim Ratib Search vendor "Karim Ratib" | Views Bulk Operations Search vendor "Karim Ratib" for product "Views Bulk Operations" | 5.x-1.2 Search vendor "Karim Ratib" for product "Views Bulk Operations" and version "5.x-1.2" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karim Ratib Search vendor "Karim Ratib" | Views Bulk Operations Search vendor "Karim Ratib" for product "Views Bulk Operations" | 5.x-1.3 Search vendor "Karim Ratib" for product "Views Bulk Operations" and version "5.x-1.3" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karim Ratib Search vendor "Karim Ratib" | Views Bulk Operations Search vendor "Karim Ratib" for product "Views Bulk Operations" | 6.x-1.0 Search vendor "Karim Ratib" for product "Views Bulk Operations" and version "6.x-1.0" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karim Ratib Search vendor "Karim Ratib" | Views Bulk Operations Search vendor "Karim Ratib" for product "Views Bulk Operations" | 6.x-1.1 Search vendor "Karim Ratib" for product "Views Bulk Operations" and version "6.x-1.1" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karim Ratib Search vendor "Karim Ratib" | Views Bulk Operations Search vendor "Karim Ratib" for product "Views Bulk Operations" | 6.x-1.2 Search vendor "Karim Ratib" for product "Views Bulk Operations" and version "6.x-1.2" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karim Ratib Search vendor "Karim Ratib" | Views Bulk Operations Search vendor "Karim Ratib" for product "Views Bulk Operations" | 6.x-1.3 Search vendor "Karim Ratib" for product "Views Bulk Operations" and version "6.x-1.3" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|
| Karim Ratib Search vendor "Karim Ratib" | Views Bulk Operations Search vendor "Karim Ratib" for product "Views Bulk Operations" | 6.x-1.4 Search vendor "Karim Ratib" for product "Views Bulk Operations" and version "6.x-1.4" | - |
Affected
| in | Drupal Search vendor "Drupal" | Drupal Search vendor "Drupal" for product "Drupal" | * | - |
Safe
|