Lucene search
MitreCVE-2015-4375HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4375
2015-06-1514:59:32
CWE-200
mitre
web.nvd.nist.gov
27
cve-2015-4375
drupal
chaos tool suite
ctools module
nvd
security vulnerability
remote attackers
sensitive information
access query
entity id
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.004
Percentile
72.2%
The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search on custom entities without an access query tag or (2) leveraging knowledge of the ID of an entity.
Affected configurations
Node
chaos_tool_suite_projectctoolsMatch7.x-1.0drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.1drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.2drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.3drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.4drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.5drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.6drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.6rc1drupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| chaos_tool_suite_project | ctools | 7.x-1.0 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.0:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.1 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.1:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.2 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.2:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.3 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.3:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.4 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.4:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.5 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.5:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.6 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.6:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.6 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.6:rc1:*:*:*:drupal:*:* |
Related
prion
prion
Design/Logic Flaw
2015-06-15 14:59:00
cvelist
cvelist
CVE-2015-4375
2015-06-15 14:00:00
nvd
nvd
CVE-2015-4375
2015-06-15 14:59:32
drupal
drupal
SA-CONTRIB-2015-079 - Chaos tool suite (ctools) - Multiple vulnerabilities
2015-03-18 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.8
Confidence
Low
EPSS
0.004
Percentile
72.2%
Related for CVE-2015-4375