CVE-2014-2983

Опубликовано: 23 апр. 2014

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.

Ссылки

http://www.debian.org/security/2014/dsa-2913
Third Party Advisory
http://www.debian.org/security/2014/dsa-2914
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/04/22/2
Mailing List
Third Party Advisory
https://drupal.org/SA-CORE-2014-002
Patch
Vendor Advisory
http://www.debian.org/security/2014/dsa-2913
Third Party Advisory
http://www.debian.org/security/2014/dsa-2914
Third Party Advisory
http://www.openwall.com/lists/oss-security/2014/04/22/2
Mailing List
Third Party Advisory
https://drupal.org/SA-CORE-2014-002
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Версия от 6.0 (включая) до 6.31 (исключая)

cpe:2.3:a:drupal:drupal:*:*:*:*:*:*:*:*

Версия от 7.0 (включая) до 7.27 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 62%

0.00434

Низкий

5 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2014-2983

ubuntu

около 11 лет назад

CVE-2014-2983

debian

около 11 лет назад

Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate t ...

GHSA-p4jq-p7qf-pw64

github

около 3 лет назад

EPSS

Процентиль: 62%

0.00434

Низкий

5 Medium

CVSS2

Дефекты

CWE-200