CVE-2009-4558
Estado: ModificadaMedia (5)—
The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N
- Puntuación base: 5
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 1.26%
- Percentil entre todas las CVEs puntuadas: 69
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-264
Referencias
- http://drupal.org/node/520564
- http://osvdb.org/55867
- http://secunia.com/advisories/35879
- http://www.securityfocus.com/bid/35710
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51787
- http://drupal.org/node/520564
- http://osvdb.org/55867
- http://secunia.com/advisories/35879
- http://www.securityfocus.com/bid/35710
- https://exchange.xforce.ibmcloud.com/vulnerabilities/51787
JSON original (NVD)
Mostrar
{
"id": "CVE-2009-4558",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 5,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"authentication": "NONE",
"integrityImpact": "NONE",
"accessComplexity": "LOW",
"availabilityImpact": "NONE",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 2.9,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 10,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"affected": [
{
"source": "cve@mitre.org",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2010-01-04T21:30:00.467",
"references": [
{
"url": "http://drupal.org/node/520564",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://osvdb.org/55867",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/35879",
"tags": [
"Vendor Advisory"
],
"source": "cve@mitre.org"
},
{
"url": "http://www.securityfocus.com/bid/35710",
"tags": [
"Patch"
],
"source": "cve@mitre.org"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51787",
"source": "cve@mitre.org"
},
{
"url": "http://drupal.org/node/520564",
"tags": [
"Patch",
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://osvdb.org/55867",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/35879",
"tags": [
"Vendor Advisory"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://www.securityfocus.com/bid/35710",
"tags": [
"Patch"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/51787",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-264"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Image Assist module 5.x-1.x before 5.x-1.8, 5.x-2.x before 2.0-alpha4, 6.x-1.x before 6.x-1.1, 6.x-2.x before 2.0-alpha4, and 6.x-3.x-dev before 2009-07-15, a module for Drupal, does not properly enforce privilege requirements for unspecified pages, which allows remote attackers to read the (1) title or (2) body of an arbitrary node via unknown vectors."
},
{
"lang": "es",
"value": "El módulo Image Assist v5.x-1.x anterior a v5.x-1.8, v5.x-2.x anterior a v2.0-alpha4, v6.x-1.x anterior a v6.x-1.1, v6.x-2.x anterior a v2.0-alpha4, y v6.x-3.x-dev anterior a v2009-07-15, para Drupal, no refuerza adecuadamente los requisitos de algunos privilegios para páginas que no se han especificado, lo que permite a atacantes remotos leer el (1)título (title) o (2)cuerpo (body) de un nodo de su elección a través de vectores no especificados."
}
],
"lastModified": "2026-06-16T23:13:53.530",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CA586D8B-FA89-4880-AD95-472C604C8A41"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C0D361CB-2021-4FAF-ACB4-F3C7DFFB9309"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D4CB7965-B4E6-42E8-8E49-16B9A764569B"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F1050F8C-FB50-42EB-8D0F-B7F2D3351A0F"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "13AB7445-036F-452B-AA29-9DE1EAB24312"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDAF3C12-B207-4397-97A8-30BF1CE99E46"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.6:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C2212E10-59C9-464B-A8EE-75D4A2EC1A12"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.7:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "69D8A4FF-F45E-48EC-A266-C3970D5E0906"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-1.x-dev:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "BEF261EE-6E9B-40B7-9FC9-098D48D8F9ED"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-2.0-alpha1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0C8CA7DB-B44D-4D9C-A685-24D579B92F28"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-2.0-alpha3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0AEC6601-4359-4921-88C8-6F8C2AE749B9"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:5.x-2.x-dev:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "72DB3A51-4F11-44BF-BBD6-D48CDABA4FD3"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "499963D0-0409-4E1E-9EE7-A303C0D4A123"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-1.0-beta1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CF997DA0-97C5-4FA8-AB98-7E1A3FBEFF3C"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-1.x-dev:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6FE5DE74-0819-41E1-AFDD-E9BE5115ACC4"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-2.0-alpha2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "144CC081-8855-4808-9AF3-CC80164DA00F"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-2.0-alpha3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2A19CC33-3306-46EA-A2E3-3A4678FB69B8"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-2.x-dev:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D5013EDA-D0E9-41F4-8687-E26B0125A2C3"
},
{
"criteria": "cpe:2.3:a:unleashedmind:img_assist:6.x-3.x-dev:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "ABFE72D5-38C6-4252-BBEE-5380A7EE7BD1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "799CA80B-F3FA-4183-A791-2071A7DA1E54"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "cve@mitre.org"
}