PT-2015-6961 · Drupal · Administration Views

Pere Orga · Publicado 2015-08-18 · Atualizado 2016-11-28 · CVE-2015-5509

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Administration Views module versions 7.x-1.x before 7.x-1.4 for Drupal

Description The issue allows remote administrators to bypass intended restrictions via unspecified vectors due to improper access granting to administration pages when used with other unspecified modules.

Recommendations For Administration Views module versions 7.x-1.x before 7.x-1.4, update to version 7.x-1.4 or later to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2015-5509

Produtos afetados

Administration Views

Referências · 5

• http://openwall.com/lists/oss-security/2015/07/04/4 · Nota
• https://drupal.org/node/2430043 · Correção
• http://securityfocus.com/bid/75278 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-5509 · Nota de Segurança
• https://drupal.org/node/2507645 · Aviso do Fabricante