Lucene search
HistoryNov 12, 2014 - 4:55 p.m.
CVE-2014-8735
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0.002
Percentile
53.0%
The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the “administer bad behavior” permission to obtain sensitive information by reading a log file.
Affected configurations
Node
bad_behavior_projectbad_behaviorMatch6.x-1.0rc1drupal
ORbad_behavior_projectbad_behaviorMatch6.x-1.0rc2drupal
ORbad_behavior_projectbad_behaviorMatch6.x-1.xdevdrupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.1drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.2rc14drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.13drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.14drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.113drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.114drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.115drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.116drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.200rc14drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.214drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.215drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.216drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.217drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.220drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.221drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.222drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.223drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.225drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.226drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.227drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.228drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.2210drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.2211drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.2212drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.2213drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.2214drupal
ORbad_behavior_projectbad_behaviorMatch6.x-2.2215drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.220drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.221drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.222drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.223drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.225drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.226drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.227drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.228drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.2210drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.2211drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.2212drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.2213drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.2214drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.2215drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.2216drupal
ORbad_behavior_projectbad_behaviorMatch7.x-2.xdevdrupal
Related
cvelist
cvelist
CVE-2014-8735
2022-10-03 16:20:38
drupal
drupal
SA-CONTRIB-2014-100 - Bad Behavior - Information Disclosure
2014-10-22 00:00:00
cve
cve
CVE-2014-8735
2022-10-03 16:20:38
prion
prion
Information disclosure
2014-11-12 16:55:00
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:S/C:P/I:N/A:N
AI Score
5.8
Confidence
Low
EPSS
0.002
Percentile
53.0%
Related for NVD:CVE-2014-8735