oss-sec mailing list archives

CVE request: drupal7 SA-CORE-2011-003 (access restriction bypass)

From: Vincent Danen <vdanen () redhat com>
Date: Wed, 27 Jul 2011 16:30:22 -0600

Could a CVE be assigned to this issue?  This only affects 7.x as the
features affected are new in 7.x.  It is an access bypass in private
file fields comments.

http://drupal.org/node/1231510

Thanks.

--

Vincent Danen / Red Hat Security Response Team

Current thread:

CVE request: drupal7 SA-CORE-2011-003 (access restriction bypass) Vincent Danen (Jul 27)
- Re: CVE request: drupal7 SA-CORE-2011-003 (access restriction bypass) Josh Bressers (Jul 29)