PT-2014-8793 · Twilio · Twilio

Karolrybak · Publicado 2014-11-20 · Atualizado 2016-06-02 · CVE-2014-9023

Positive Technologies (AI Summary)

CVSS v2.0

5.5

Média

Vetor base

AV:N/AC:L/Au:S/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Twilio module versions 7.x-1.x through 7.x-1.8

Description The issue allows remote authenticated users to read and modify authentication tokens by leveraging the "access administration pages" Drupal permission, due to improper access restriction to the Twilio administration pages.

Recommendations For Twilio module versions 7.x-1.x through 7.x-1.8, update to version 7.x-1.9 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2014-9023

Produtos afetados

Twilio

Referências · 3

• https://drupal.org/node/2337623 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-9023 · Nota de Segurança
• https://drupal.org/node/2344363 · Aviso do Fabricante