CVE-2007-4493 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-4493
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-4493

Description: eZ publish before 3.8.9, and 3.9 before 3.9.3, does not properly check permissions on module views that lack a policy function, which has unknown impact and attack vectors, as demonstrated by a vulnerability in the discount functionality in the shop module.

CVE Status: Candidate

References: SAID Secunia Advisory: SA26686 OSVDB 40324 CONFIRM http://ez.no/download/ez_publish/changelogs/ez_publish_3_9/changelog_3_9_2_to_3_9_3 http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_8_8_to_3_8_9 http://ez.no/community/news/ez_publish_security_fixes_3_9_3_and_3_8_9 BID 25539

Return to the previous page.