Lucene search

[email protected]CVE-2014-9022

HistoryOct 03, 2022 - 4:20 p.m.

CVE-2014-9022

2022-10-0316:20:39

CWE-264

[email protected]

web.nvd.nist.gov

cve-2014-9022

webform component roles module

drupal

bypass

remote attackers

nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.3%

JSON

The Webform Component Roles module 6.x-1.x before 6.x-1.8 and 7.x-1.x before 7.x-1.8 for Drupal allows remote attackers to bypass the “disabled” restriction and modify read-only components via a crafted form.

Affected configurations

NVD

Node

web_component_roles_projectweb_component_rolesMatch6.x-1.5drupal

web_component_roles_projectweb_component_rolesMatch6.x-1.6drupal

web_component_roles_projectweb_component_rolesMatch7.x-1.0drupal

web_component_roles_projectweb_component_rolesMatch7.x-1.1drupal

web_component_roles_projectweb_component_rolesMatch7.x-1.2drupal

web_component_roles_projectweb_component_rolesMatch7.x-1.3drupal

web_component_roles_projectweb_component_rolesMatch7.x-1.4drupal

web_component_roles_projectweb_component_rolesMatch7.x-1.5drupal

web_component_roles_projectweb_component_rolesMatch7.x-1.6drupal

web_component_roles_projectweb_component_rolesMatch7.x-1.7drupal

CPENameOperatorVersion
web_component_roles_project:web_component_rolesweb component roles project web component roleseq6.x-1.5
web_component_roles_project:web_component_rolesweb component roles project web component roleseq6.x-1.6
web_component_roles_project:web_component_rolesweb component roles project web component roleseq7.x-1.0
web_component_roles_project:web_component_rolesweb component roles project web component roleseq7.x-1.1
web_component_roles_project:web_component_rolesweb component roles project web component roleseq7.x-1.2
web_component_roles_project:web_component_rolesweb component roles project web component roleseq7.x-1.3
web_component_roles_project:web_component_rolesweb component roles project web component roleseq7.x-1.4
web_component_roles_project:web_component_rolesweb component roles project web component roleseq7.x-1.5
web_component_roles_project:web_component_rolesweb component roles project web component roleseq7.x-1.6
web_component_roles_project:web_component_rolesweb component roles project web component roleseq7.x-1.7

CPE	Name	Operator	Version
web_component_roles_project:web_component_roles	web component roles project web component roles	eq	6.x-1.5
web_component_roles_project:web_component_roles	web component roles project web component roles	eq	6.x-1.6
web_component_roles_project:web_component_roles	web component roles project web component roles	eq	7.x-1.0
web_component_roles_project:web_component_roles	web component roles project web component roles	eq	7.x-1.1
web_component_roles_project:web_component_roles	web component roles project web component roles	eq	7.x-1.2
web_component_roles_project:web_component_roles	web component roles project web component roles	eq	7.x-1.3
web_component_roles_project:web_component_roles	web component roles project web component roles	eq	7.x-1.4
web_component_roles_project:web_component_roles	web component roles project web component roles	eq	7.x-1.5
web_component_roles_project:web_component_roles	web component roles project web component roles	eq	7.x-1.6
web_component_roles_project:web_component_roles	web component roles project web component roles	eq	7.x-1.7

References

www.drupal.org/node/2373471

www.drupal.org/node/2373473

www.drupal.org/node/2373973

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

6.9 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

53.3%

JSON

Related for CVE-2014-9022

nvd1 prion1 drupal1 cvelist1