CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:S/C:N/I:P/A:P
AI Score
Confidence
Low
EPSS
Percentile
61.9%
The Views Bulk Operations (VBO) module 6.x-1.x and 7.x-3.x before 7.x-3.3 for Drupal, when the bulk operation for changing Roles is enabled, allows remote authenticated users to edit user accounts and add arbitrary roles to the accounts by leveraging access to a user account listing view with VBO enabled.
Vendor | Product | Version | CPE |
---|---|---|---|
views_bulk_operations_project | views_bulk_operations | 6.x-1.17 | cpe:2.3:a:views_bulk_operations_project:views_bulk_operations:6.x-1.17:*:*:*:*:drupal:*:* |
views_bulk_operations_project | views_bulk_operations | 6.x-1.x | cpe:2.3:a:views_bulk_operations_project:views_bulk_operations:6.x-1.x:dev:*:*:*:drupal:*:* |
views_bulk_operations_project | views_bulk_operations | 7.x-3.0 | cpe:2.3:a:views_bulk_operations_project:views_bulk_operations:7.x-3.0:*:*:*:*:drupal:*:* |
views_bulk_operations_project | views_bulk_operations | 7.x-3.0 | cpe:2.3:a:views_bulk_operations_project:views_bulk_operations:7.x-3.0:alpha1:*:*:*:drupal:*:* |
views_bulk_operations_project | views_bulk_operations | 7.x-3.0 | cpe:2.3:a:views_bulk_operations_project:views_bulk_operations:7.x-3.0:alpha2:*:*:*:drupal:*:* |
views_bulk_operations_project | views_bulk_operations | 7.x-3.0 | cpe:2.3:a:views_bulk_operations_project:views_bulk_operations:7.x-3.0:alpha3:*:*:*:drupal:*:* |
views_bulk_operations_project | views_bulk_operations | 7.x-3.0 | cpe:2.3:a:views_bulk_operations_project:views_bulk_operations:7.x-3.0:beta1:*:*:*:drupal:*:* |
views_bulk_operations_project | views_bulk_operations | 7.x-3.0 | cpe:2.3:a:views_bulk_operations_project:views_bulk_operations:7.x-3.0:beta2:*:*:*:drupal:*:* |
views_bulk_operations_project | views_bulk_operations | 7.x-3.0 | cpe:2.3:a:views_bulk_operations_project:views_bulk_operations:7.x-3.0:beta3:*:*:*:drupal:*:* |
views_bulk_operations_project | views_bulk_operations | 7.x-3.0 | cpe:2.3:a:views_bulk_operations_project:views_bulk_operations:7.x-3.0:rc1:*:*:*:drupal:*:* |