Advisory ID: DRUPAL-SA-CORE-2011-002 Project: Drupal core Version: 7.x Date: 2011-JUNE-29 Security risk: Highly critical Exploitable from: Remote Vulnerability: Access bypass Description Access bypass in node listings Listings showing nodes but not JOINing the node table show all nodes regardless of restrictions imposed by the node_access system. In core, this affects the taxonomy and the f…