CVE-2015-5498

The Shipwire Drupal module 7.x-1.x is vulnerable (before 7.x-1.03) because it does not enforce the view permission for the shipments overview (admin/shipwire/shipments), allowing remote access to sensitive information. Affected: Shipwire 7.x-1.x prior to 7.x-1.03. Exploitation details are not pro...

CVE-2015-5498: Undefined Security Weakness

The Shipwire API module 7.x-1.x before 7.x-1.03 for Drupal does not check the view permission for the shipments overview admin/shipwire/shipments, which allows remote attackers to obtain sensitive information via a request to the page...

PT-2015-6950

Name of the Vulnerable Software and Affected Versions Shipwire API module versions 7.x-1.x before 7.x-1.03 Description The issue allows remote attackers to obtain sensitive information due to a lack of view permission check for the shipments overview page, accessible via a request to the...