CVE-2015-7226

The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler...

CVE-2015-7226

CVE-2015-7226 affects the Drupal contributed module Administration Views (7.x) , specifically versions in the 7.x-1.x branch prior to 7.x-1.5. The root cause is that access checks are performed based on the router path extracted from the view rather than the view’s display property, enabling info...