Lucene search
HistoryJun 15, 2015 - 2:59 p.m.
CVE-2015-4375
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.004
Percentile
72.2%
The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search on custom entities without an access query tag or (2) leveraging knowledge of the ID of an entity.
Affected configurations
Node
chaos_tool_suite_projectctoolsMatch7.x-1.0drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.1drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.2drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.3drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.4drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.5drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.6drupal
ORchaos_tool_suite_projectctoolsMatch7.x-1.6rc1drupal
| Vendor | Product | Version | CPE |
|---|---|---|---|
| chaos_tool_suite_project | ctools | 7.x-1.0 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.0:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.1 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.1:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.2 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.2:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.3 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.3:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.4 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.4:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.5 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.5:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.6 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.6:*:*:*:*:drupal:*:* |
| chaos_tool_suite_project | ctools | 7.x-1.6 | cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.6:rc1:*:*:*:drupal:*:* |
Related
cve
cve
CVE-2015-4375
2015-06-15 14:59:32
prion
prion
Design/Logic Flaw
2015-06-15 14:59:00
cvelist
cvelist
CVE-2015-4375
2015-06-15 14:00:00
drupal
drupal
SA-CONTRIB-2015-079 - Chaos tool suite (ctools) - Multiple vulnerabilities
2015-03-18 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.6
Confidence
Low
EPSS
0.004
Percentile
72.2%
Related for NVD:CVE-2015-4375