CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
Confidence
Low
EPSS
Percentile
53.0%
The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the “administer bad behavior” permission to obtain sensitive information by reading a log file.
Vendor | Product | Version | CPE |
---|---|---|---|
bad_behavior_project | bad_behavior | 7.x-2.2211 | cpe:/a:bad_behavior_project:bad_behavior:7.x-2.2211::: |
bad_behavior_project | bad_behavior | 6.x-2.2215 | cpe:/a:bad_behavior_project:bad_behavior:6.x-2.2215::: |
bad_behavior_project | bad_behavior | 7.x-2.228 | cpe:/a:bad_behavior_project:bad_behavior:7.x-2.228::: |
bad_behavior_project | bad_behavior | 6.x-2.216 | cpe:/a:bad_behavior_project:bad_behavior:6.x-2.216::: |
bad_behavior_project | bad_behavior | 6.x-1.0 | cpe:/a:bad_behavior_project:bad_behavior:6.x-1.0:rc2:: |
bad_behavior_project | bad_behavior | 7.x-2.220 | cpe:/a:bad_behavior_project:bad_behavior:7.x-2.220::: |
bad_behavior_project | bad_behavior | 6.x-2.214 | cpe:/a:bad_behavior_project:bad_behavior:6.x-2.214::: |
bad_behavior_project | bad_behavior | 7.x-2.2214 | cpe:/a:bad_behavior_project:bad_behavior:7.x-2.2214::: |
bad_behavior_project | bad_behavior | 6.x-2.221 | cpe:/a:bad_behavior_project:bad_behavior:6.x-2.221::: |
bad_behavior_project | bad_behavior | 7.x-2.225 | cpe:/a:bad_behavior_project:bad_behavior:7.x-2.225::: |