PT-2015-7477 · Drupal · Fieldable Panels Panes

Published 2015-09-17 · Updated 2015-09-22 · CVE-2015-7227

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Fieldable Panels Panes module versions 7.x-1.x through 7.x-1.6

Description The issue allows remote authenticated users to edit panes by leveraging permissions to edit panels, due to improper permission checks for editing Fieldable Panels Panes entities.

Recommendations For Fieldable Panels Panes module versions 7.x-1.x through 7.x-1.6, update to version 7.x-1.7 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-7227

Affected Products

Fieldable Panels Panes

References · 3

• https://drupal.org/node/2561971 · Vendor Advisory
• https://drupal.org/node/2561981 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2015-7227 · Security Note