CVE-2008-1731

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-04-11 · updated 2026-06-16
Weakness: CWE-264

Description

The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remote attackers to bypass intended access restrictions, and read or modify nodes, in opportunistic circumstances related to interaction between Simple Access and (1) Node clone or (2) Project issue tracking.

Affected products

3281D Simple Access: 5.x-1.0, 5.x-1.0-beta1, 5.x-1.1, 5.x-1.2, 5.x-1.2-1, 5.x-1.x-dev

References

http://drupal.org/node/244560
http://secunia.com/advisories/29772
http://www.osvdb.org/44271
http://www.securityfocus.com/bid/28720
http://www.vupen.com/english/advisories/2008/1184
https://exchange.xforce.ibmcloud.com/vulnerabilities/41756
http://drupal.org/node/244560
http://secunia.com/advisories/29772
http://www.osvdb.org/44271
http://www.securityfocus.com/bid/28720
http://www.vupen.com/english/advisories/2008/1184
https://exchange.xforce.ibmcloud.com/vulnerabilities/41756

Get alerted when CVE-2008-1731 or the next vulnerability affects your stack