PT-2015-6961 · Drupal · Administration Views

Pere Orga · Published 2015-08-18 · Updated 2016-11-28 · CVE-2015-5509

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Administration Views module versions 7.x-1.x before 7.x-1.4 for Drupal

Description The issue allows remote administrators to bypass intended restrictions via unspecified vectors due to improper access granting to administration pages when used with other unspecified modules.

Recommendations For Administration Views module versions 7.x-1.x before 7.x-1.4, update to version 7.x-1.4 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-5509

Affected Products

Administration Views

References · 5

• https://drupal.org/node/2430043 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-5509 · Security Note
• https://drupal.org/node/2507645 · Vendor Advisory
• http://openwall.com/lists/oss-security/2015/07/04/4 · Note
• http://securityfocus.com/bid/75278 · Note