Lucene search

[email protected]NVD:CVE-2015-7875

HistoryAug 07, 2017 - 5:29 p.m.

CVE-2015-7875

2017-08-0717:29:00

CWE-264

[email protected]

web.nvd.nist.gov

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

50.9%

JSON

ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the “edit” permission for the “content type” plugins that are used on Panels and similar systems to place content and functionality on a page.

Affected configurations

NVD

Node

chaos_tool_suite_projectctoolsMatch6.x-1.0drupal

chaos_tool_suite_projectctoolsMatch6.x-1.0alpha1drupal

chaos_tool_suite_projectctoolsMatch6.x-1.0alpha2drupal

chaos_tool_suite_projectctoolsMatch6.x-1.0alpha3drupal

chaos_tool_suite_projectctoolsMatch6.x-1.0beta1drupal

chaos_tool_suite_projectctoolsMatch6.x-1.0beta2drupal

chaos_tool_suite_projectctoolsMatch6.x-1.0beta3drupal

chaos_tool_suite_projectctoolsMatch6.x-1.0beta4drupal

chaos_tool_suite_projectctoolsMatch6.x-1.0rc1drupal

chaos_tool_suite_projectctoolsMatch6.x-1.1drupal

chaos_tool_suite_projectctoolsMatch6.x-1.2drupal

chaos_tool_suite_projectctoolsMatch6.x-1.3drupal

chaos_tool_suite_projectctoolsMatch6.x-1.4drupal

chaos_tool_suite_projectctoolsMatch6.x-1.5drupal

chaos_tool_suite_projectctoolsMatch6.x-1.6drupal

chaos_tool_suite_projectctoolsMatch6.x-1.7drupal

chaos_tool_suite_projectctoolsMatch6.x-1.8drupal

chaos_tool_suite_projectctoolsMatch6.x-1.9drupal

chaos_tool_suite_projectctoolsMatch6.x-1.11drupal

chaos_tool_suite_projectctoolsMatch6.x-1.12drupal

chaos_tool_suite_projectctoolsMatch6.x-1.13drupal

chaos_tool_suite_projectctoolsMatch6.x-1.xdevdrupal

chaos_tool_suite_projectctoolsMatch7.x-1.0drupal

chaos_tool_suite_projectctoolsMatch7.x-1.0alpha1drupal

chaos_tool_suite_projectctoolsMatch7.x-1.0alpha2drupal

chaos_tool_suite_projectctoolsMatch7.x-1.0alpha3drupal

chaos_tool_suite_projectctoolsMatch7.x-1.0alpha4drupal

chaos_tool_suite_projectctoolsMatch7.x-1.0beta1drupal

chaos_tool_suite_projectctoolsMatch7.x-1.0rc1drupal

chaos_tool_suite_projectctoolsMatch7.x-1.0rc2drupal

chaos_tool_suite_projectctoolsMatch7.x-1.1drupal

chaos_tool_suite_projectctoolsMatch7.x-1.2drupal

chaos_tool_suite_projectctoolsMatch7.x-1.3drupal

chaos_tool_suite_projectctoolsMatch7.x-1.4drupal

chaos_tool_suite_projectctoolsMatch7.x-1.5drupal

chaos_tool_suite_projectctoolsMatch7.x-1.6drupal

chaos_tool_suite_projectctoolsMatch7.x-1.6rc1drupal

chaos_tool_suite_projectctoolsMatch7.x-1.7drupal

chaos_tool_suite_projectctoolsMatch7.x-1.xdevdrupal

References

www.openwall.com/lists/oss-security/2015/10/21/2

www.securityfocus.com/bid/76441

www.drupal.org/node/2554145

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

0.001 Low

EPSS

Percentile

50.9%

JSON

Related for NVD:CVE-2015-7875

prion1 cve1 cvelist1 drupal1 ibm2