CVE-2008-1731: The Simple Access module for Drupal 5.x through 5.x-1.2-2 does not properly handle the privacy information...

Security readout for executives and security teams

CVE-2008-1731 is an old Drupal module access-control flaw. In specific legacy Drupal 5 setups, Simple Access could mishandle node privacy settings, letting a remote user read or modify content that should have been restricted. Exposure is likely limited to legacy Drupal 5 sites using Simple Access through 5.x-1.2-2, especially where Node clone or Project issue tracking is installed. The bundle does not identify other affected products. Prioritize if any Drupal 5 site still stores sensitive or business-critical content. Otherwise, handle during legacy-platform risk reduction because there is no cited evidence of active exploitation. Mitigation focus: Inventory Drupal 5 sites and installed Simple Access module versions.; Review the Drupal advisory for the vendor-approved fix or workaround.; Remove or isolate legacy Drupal 5 systems if still internet-facing..

Prepared

Jun 28, 2026, 19:09 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.