CVE-2014-1400 - The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions and read unpublished comments via unspecified vectors

Back Back to CVE browser

MEDIUM

The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions and read unpublished comments via unspecified vectors

Published Apr 10, 2018

6.5

MEDIUM

CVSS 3.0

EPSS 1.43%

Description

The entity_access API in the Entity API module 7.x-1.x before 7.x-1.3 for Drupal might allow remote authenticated users to bypass intended access restrictions and read unpublished comments via unspecified vectors.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-284

References (7)

http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126811.html
vendor-advisoryx_refsource_FEDORAThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126816.html
vendor-advisoryx_refsource_FEDORAThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/01/09/3
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.securityfocus.com/bid/64729
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1050802
x_refsource_CONFIRMIssue TrackingThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/90396
vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry
https://www.drupal.org/node/2169595
x_refsource_MISCPatchVendor Advisory

Link	Providers	Tags
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126811.html		vendor-advisoryx_refsource_FEDORAThird Party Advisory
http://lists.fedoraproject.org/pipermail/package-announce/2014-January/126816.html		vendor-advisoryx_refsource_FEDORAThird Party Advisory
http://www.openwall.com/lists/oss-security/2014/01/09/3		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
http://www.securityfocus.com/bid/64729		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=1050802		x_refsource_CONFIRMIssue TrackingThird Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/90396		vdb-entryx_refsource_XFThird Party AdvisoryVDB Entry
https://www.drupal.org/node/2169595		x_refsource_MISCPatchVendor Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Apr 10, 2018

Updated Aug 6, 2024

Reserved Jan 9, 2014

Link CVE-2014-1400

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2014-1400

Red Hat

Severity n/a

Public date n/a

Links CVE-2014-1400