Lucene search
HistoryAug 18, 2015 - 6:00 p.m.
CVE-2015-5509
cve-2015-5509
administration views
drupal
access control
bypass restrictions
security vulnerability
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.4%
The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors.
Affected configurations
Node
administration_views_projectadministration_viewsMatch7.x-1.0drupal
ORadministration_views_projectadministration_viewsMatch7.x-1.0rc1drupal
ORadministration_views_projectadministration_viewsMatch7.x-1.1drupal
ORadministration_views_projectadministration_viewsMatch7.x-1.2drupal
ORadministration_views_projectadministration_viewsMatch7.x-1.xdevdrupal
Related
prion
prion
Authentication flaw
2015-08-18 18:00:00
drupal
drupal
Administration Views - Moderately Critical - Access Bypass - SA-CONTRIB-2015-122
2015-06-17 00:00:00
nvd
nvd
CVE-2015-5509
2015-08-18 18:00:14
cvelist
cvelist
CVE-2015-5509
2015-08-18 17:00:00
6 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:P/I:P/A:P
6.9 Medium
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
70.4%
Related for CVE-2015-5509