Lucene search
HistoryApr 23, 2014 - 3:55 p.m.
CVE-2014-2983
cve-2014-2983
drupal
security vulnerability
remote anonymous users
sensitive information
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.5%
Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.
Affected configurations
Node
drupaldrupalRange6.0–6.31
ORdrupaldrupalRange7.0–7.27
Node
debiandebian_linuxMatch6.0
ORdebiandebian_linuxMatch7.0
ORdebiandebian_linuxMatch8.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| drupal:drupal | drupal | lt | 6.31 |
| drupal:drupal | drupal | lt | 7.27 |
Related
securityvulns
securityvulns
[SECURITY] [DSA 2914-1] drupal6 security update
2014-05-04 00:00:00
[SECURITY] [DSA 2913-1] drupal7 security update
2014-05-04 00:00:00
[ MDVSA-2015:181 ] drupal
2015-05-12 00:00:00
osv
osv
drupal7 - security update
2014-04-25 00:00:00
drupal6 - security update
2014-04-25 00:00:00
prion
prion
Input validation
2014-04-23 15:55:00
nvd
nvd
CVE-2014-2983
2014-04-23 15:55:05
debian
debian
[SECURITY] [DSA 2913-1] drupal7 security update
2014-04-25 20:17:56
[SECURITY] [DSA 2914-1] drupal6 security update
2014-04-25 20:18:01
[SECURITY] [DSA 2914-1] drupal6 security update
2014-04-25 20:18:01
openvas
openvas
Debian Security Advisory DSA 2913-1 (drupal7 - security update)
2014-04-25 00:00:00
Debian: Security Advisory (DSA-2913-1)
2014-04-24 00:00:00
Debian: Security Advisory (DSA-2914-1)
2014-04-24 00:00:00
nessus
nessus
Debian DSA-2913-1 : drupal7 - security update
2014-04-27 00:00:00
Drupal 7.x < 7.27 Forms API Information Disclosure
2014-04-21 00:00:00
Drupal 6.x < 6.31 Forms API Information Disclosure
2014-04-21 00:00:00
cvelist
cvelist
CVE-2014-2983
2014-04-23 14:00:00
debiancve
debiancve
CVE-2014-2983
2014-04-23 15:55:00
drupal
drupal
SA-CORE-2014-002 - Drupal core - Information Disclosure
2014-04-16 00:00:00
ubuntucve
ubuntucve
CVE-2014-2983
2014-04-23 00:00:00
mageia
mageia
Updated drupal packages fix security vulnerabilities
2014-08-07 21:01:33
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
5.8 Medium
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.5%
Related for CVE-2014-2983