CVE-2013-4406

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2013-4406
The Quick Tabs module 6.x-2.x before 6.x-2.2, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.6 for Drupal does not properly check block permissions, which allows remote attackers to obtain sensitive information by reading a Quick Tab.

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://www.openwall.com/lists/oss-security/2013/10/04/14
http://www.openwall.com/lists/oss-security/2013/10/05/1
https://drupal.org/node/2103113 Patch
https://drupal.org/node/2103121 Patch
https://drupal.org/node/2103127 Patch
https://drupal.org/node/2103187 Patch Vendor Advisory
http://www.openwall.com/lists/oss-security/2013/10/04/14
http://www.openwall.com/lists/oss-security/2013/10/05/1
https://drupal.org/node/2103113 Patch
https://drupal.org/node/2103121 Patch
https://drupal.org/node/2103127 Patch
https://drupal.org/node/2103187 Patch Vendor Advisory
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-3.0:-:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-3.0:beta1:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-3.0:beta2:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-3.1:*:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-3.x:dev:*:*:*:drupal:*:*

Configuration 2 (hide)

OR cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:-:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:alpha1:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:alpha2:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:beta1:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:beta2:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.0:beta3:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.1:*:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.2:*:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.3:*:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.4:*:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.5:*:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:7.x-3.x:dev:*:*:*:drupal:*:*

Configuration 3 (hide)

OR cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:-:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:rc1:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:rc2:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:rc3:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:rc4:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.0:rc5:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.1:*:*:*:*:drupal:*:*
cpe:2.3:a:quick_tabs_module_project:quicktabs:6.x-2.x:dev:*:*:*:drupal:*:*
History

21 Nov 2024, 01:55

Type Values Removed Values Added
References () http://www.openwall.com/lists/oss-security/2013/10/04/14 - () http://www.openwall.com/lists/oss-security/2013/10/04/14 -
References () http://www.openwall.com/lists/oss-security/2013/10/05/1 - () http://www.openwall.com/lists/oss-security/2013/10/05/1 -
References () https://drupal.org/node/2103113 - Patch () https://drupal.org/node/2103113 - Patch
References () https://drupal.org/node/2103121 - Patch () https://drupal.org/node/2103121 - Patch
References () https://drupal.org/node/2103127 - Patch () https://drupal.org/node/2103127 - Patch
References () https://drupal.org/node/2103187 - Patch, Vendor Advisory () https://drupal.org/node/2103187 - Patch, Vendor Advisory
Information

Published : 2014-05-19 14:55

Updated : 2025-04-12 10:46

NVD link : CVE-2013-4406

Mitre link : CVE-2013-4406

CVE.ORG link : CVE-2013-4406

JSON object : View

Products Affected

quick_tabs_module_project

  • quicktabs
CWE
CWE-264

Permissions, Privileges, and Access Controls