Description
The Node Hierarchy module 5.x before 5.x-1.1 and 6.x before 6.x-1.0 for Drupal does not properly implement access checks, which allows remote attackers with "access content" permissions to bypass restrictions and modify the node hierarchy via unspecified attack vectors.
References
- 30622 third-party-advisory
- node-hierarchy-access-security-bypass(43006) vdb-entry
- http://drupal.org/node/269473
- 29675 vdb-entry