Vulnerabilities > CVE-2016-20001 - Incorrect Authorization vulnerability in Rest/Json Project Rest/Json

047910
CVSS 9.8 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
rest-json-project
CWE-863
critical

Summary

The REST/JSON project 7.x-1.x for Drupal allows node access bypass, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.

Common Weakness Enumeration (CWE)