CVE-2008-1731

The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information for nodes, which might allow remote attackers to bypass intended access restrictions, and read or modify nodes, in opportunistic circumstances related to interaction between Simple Access and (1) Node clone or (2) Project issue tracking.

• CWE-264

• http://drupal.org/node/244560Patch, Vendor Advisory
• http://secunia.com/advisories/29772Vendor Advisory
• http://www.osvdb.org/44271
• http://www.securityfocus.com/bid/28720Patch
• http://www.vupen.com/english/advisories/2008/1184
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41756
• http://drupal.org/node/244560Patch, Vendor Advisory
• http://secunia.com/advisories/29772Vendor Advisory
• http://www.osvdb.org/44271
• http://www.securityfocus.com/bid/28720Patch
• http://www.vupen.com/english/advisories/2008/1184
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41756

Published

Apr 11, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-1725The IBizEBank.FIProfile.1 ActiveX control in fiprofile20.ocx…
• CVE-2008-1726Multiple SQL injection vulnerabilities in KnowledgeQuest 2.6…
• CVE-2008-1727KnowledgeQuest 2.5 and 2.6 does not require authentication f…
• CVE-2008-1728ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5…
• CVE-2008-1729The menu system in Drupal 6 before 6.2 has incorrect menu se…
• CVE-2008-1730Directory traversal vulnerability in download.html in ARWScr…
• CVE-2008-1732SQL injection vulnerability in showpredictionsformatch.php i…
• CVE-2008-1733SQL injection vulnerability in puarcade.class.php 2.2 and ea…
• CVE-2008-1734Interpretation conflict in PHP Toolkit before 1.0.1 on Gento…
• CVE-2008-1735BitDefender Antivirus 2008 20080118 and earlier allows local…
• CVE-2008-1736Comodo Firewall Pro before 3.0 does not properly validate ce…
• CVE-2008-1737Sophos Anti-Virus 7.0.5, and other 7.x versions, when Runtim…