CVE-2015-8081

2022-10-0316:15:58

CWE-200

[email protected]

web.nvd.nist.gov

cve-2015-8081

field as block module

drupal

remote attackers

sensitive information

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.4 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

51.0%

JSON

The Field as Block module 7.x-1.x before 7.x-1.4 for Drupal might allow remote attackers to obtain sensitive field information by reading a cached block.

Affected configurations

NVD

Node

field_as_block_projectfield_as_blockMatch7.x-1.0drupal

field_as_block_projectfield_as_blockMatch7.x-1.1drupal

field_as_block_projectfield_as_blockMatch7.x-1.2drupal

field_as_block_projectfield_as_blockMatch7.x-1.3drupal

CPENameOperatorVersion
field_as_block_project:field_as_blockfield as block project field as blockeq7.x-1.0
field_as_block_project:field_as_blockfield as block project field as blockeq7.x-1.1
field_as_block_project:field_as_blockfield as block project field as blockeq7.x-1.2
field_as_block_project:field_as_blockfield as block project field as blockeq7.x-1.3

CPE	Name	Operator	Version
field_as_block_project:field_as_block	field as block project field as block	eq	7.x-1.0
field_as_block_project:field_as_block	field as block project field as block	eq	7.x-1.1
field_as_block_project:field_as_block	field as block project field as block	eq	7.x-1.2
field_as_block_project:field_as_block	field as block project field as block	eq	7.x-1.3