CVE-2005-4851 Information

Description

eZ publish 3.4.4 through 3.7 before 20050722 applies certain permissions on the node level which allows remote authenticated users to bypass the original permissions on embedded objects in XML fields and read these objects.

Reference

http://ez.no/download/ez_publish/changelogs/ez_publish_3_8/changelog_3_6_x_3_7_x_to_3_8_0 http://issues.ez.no/6841