Lucene search

K
cve[email protected]CVE-2015-7227
HistoryOct 03, 2022 - 4:15 p.m.

CVE-2015-7227

2022-10-0316:15:56
CWE-264
web.nvd.nist.gov
23
cve-2015-7227
fieldable panels panes
drupal
permission vulnerability
nvd

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.0%

The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels.

Affected configurations

NVD
Node
fieldable_panels_panes_projectfieldable_panels_panesMatch7.x-1.0drupal
OR
fieldable_panels_panes_projectfieldable_panels_panesMatch7.x-1.0beta2drupal
OR
fieldable_panels_panes_projectfieldable_panels_panesMatch7.x-1.1drupal
OR
fieldable_panels_panes_projectfieldable_panels_panesMatch7.x-1.2drupal
OR
fieldable_panels_panes_projectfieldable_panels_panesMatch7.x-1.3drupal
OR
fieldable_panels_panes_projectfieldable_panels_panesMatch7.x-1.4drupal
OR
fieldable_panels_panes_projectfieldable_panels_panesMatch7.x-1.5drupal
OR
fieldable_panels_panes_projectfieldable_panels_panesMatch7.x-1.6drupal
OR
fieldable_panels_panes_projectfieldable_panels_panesMatch7.x-1.xdevdrupal

3.5 Low

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

37.0%

Related for CVE-2015-7227