CVE-2015-7880

Опубликовано: 13 сент. 2017

Источник: nvd

CVSS3: 4.3

CVSS2: 4

EPSS Низкий

Описание

The Entity Registration module 7.x-1.x before 7.x-1.5 for Drupal allows remote attackers to obtain sensitive event registration information by leveraging the "Register other accounts" permission and knowledge of usernames.

Ссылки

http://www.openwall.com/lists/oss-security/2015/10/21/2
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/77023
Third Party Advisory
VDB Entry
https://www.drupal.org/node/2582015
Mitigation
Vendor Advisory
https://www.drupal.org/node/2582283
Vendor Advisory
http://www.openwall.com/lists/oss-security/2015/10/21/2
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/77023
Third Party Advisory
VDB Entry
https://www.drupal.org/node/2582015
Mitigation
Vendor Advisory
https://www.drupal.org/node/2582283
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:drupal:drupal:7.x-1.0:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.x-1.0:rc1:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.x-1.0:rc2:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.x-1.1:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.x-1.2:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.x-1.3:*:*:*:*:*:*:*

cpe:2.3:a:drupal:drupal:7.x-1.4:*:*:*:*:*:*:*

EPSS

Процентиль: 31%

0.00112

Низкий

4.3 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

GHSA-m4rx-8rj2-qhj2