Lucene search
HistoryOct 03, 2022 - 4:16 p.m.
CVE-2015-8232
uc profile
drupal
cve-2015-8232
vulnerability
security
nvd
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
58.5%
The UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumstances, which might allow remote attackers to obtain sensitive information from the anonymous user profile via unspecified vectors.
Affected configurations
Node
uc_profile_projectuc_profileMatch6.x-1.1drupal
ORuc_profile_projectuc_profileMatch6.x-1.1rc1drupal
ORuc_profile_projectuc_profileMatch6.x-1.1rc2drupal
ORuc_profile_projectuc_profileMatch6.x-1.1rc3drupal
ORuc_profile_projectuc_profileMatch6.x-1.2drupal
Related
prion
prion
Design/Logic Flaw
2015-11-17 15:59:00
drupal
drupal
UC Profile - Moderately Critical - Information Disclosure - SA-CONTRIB-2015-165
2015-11-11 00:00:00
nvd
nvd
CVE-2015-8232
2015-11-17 15:59:25
cvelist
cvelist
CVE-2015-8232
2022-10-03 16:16:00
4.3 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
6.3 Medium
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
58.5%
Related for CVE-2015-8232