PT-2015-7476 · Drupal · Administration Views

Maxim Baev · Publicado 2015-09-17 · Atualizado 2016-11-28 · CVE-2015-7226

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Administration Views module versions 7.x-1.x through 7.x-1.4

Description The issue allows remote attackers to obtain sensitive information via vectors related to the access handler, due to the module checking access permissions based on the router path from the view instead of the display property.

Recommendations For Administration Views module versions 7.x-1.x through 7.x-1.4, update to version 7.x-1.5 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2015-7226

Produtos afetados

Administration Views

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-7226 · Nota de Segurança
• https://drupal.org/node/2529366 · Correção
• http://cgit.drupalcode.org/admin_views/commit/?id=44098bb · Nota
• http://securityfocus.com/bid/75697 · Nota
• https://drupal.org/node/2529378 · Aviso do Fabricante