CVE-2014-8734

2014-11-1216:55:07

CWE-264

[email protected]

web.nvd.nist.gov

drupal

og menu

cve-2014-8734

security

vulnerability

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.6%

JSON

The Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote authenticated users with the “access administration pages” permission to change module settings via unspecified vectors.

Affected configurations

NVD

Node

drupalorganic_groups_menuRange≤7.x-2.1

drupalorganic_groups_menuMatch7.x-2.0

drupalorganic_groups_menuMatch7.x-2.x-dev

CPENameOperatorVersion
drupal:organic_groups_menudrupal organic groups menule7.x-2.1
drupal:organic_groups_menudrupal organic groups menueq7.x-2.0
drupal:organic_groups_menudrupal organic groups menueq7.x-2.x-dev

CPE	Name	Operator	Version
drupal:organic_groups_menu	drupal organic groups menu	le	7.x-2.1
drupal:organic_groups_menu	drupal organic groups menu	eq	7.x-2.0
drupal:organic_groups_menu	drupal organic groups menu	eq	7.x-2.x-dev