CWE Code: 264
Vulnerability Type: privilege_escalation
CVSS Score: 4.0
CWE Name:  Permissions Privileges and Access Controls
Summary: the smartqueue_og module 5.x before 5.x-1.3 and 6.x before 6.x-1.0-rc3, a module for drupal, does not verify group-node privileges in certain circumstances involving subqueue creation, which allows remote authenticated users to discover arbitrary organic group names by reading confirmation messages.
Access Authentication: SINGLE
Access Complexity: LOW
Access Vector: NETWORK
Impact (C/I/A): PARTIAL/NONE/NONE
Published Date: 2009-11-09
Last Modified Date: 2009-11-10