medium4.0
CVE-2015-3379
The Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to the default views configu…
Impact
The Views module before 6.x-2.18, 6.x-3.x before 6.x-3.2, and 7.x-3.x before 7.x-3.10 for Drupal does not properly restrict access to the default views configurations, which allows remote authenticated users to obtain sensitive information via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Views Project | Views | through 6.x-2.16 Versions 6.x-3.0, 7.x-3.0, 7.x-3.1, 7.x-3.2, 7.x-3.3 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2015/02/13/12
- https://www.drupal.org/node/2424097
- https://www.drupal.org/node/2424101
- https://www.drupal.org/node/2424103
- https://www.drupal.org/node/2424403
- http://www.openwall.com/lists/oss-security/2015/02/13/12
- https://www.drupal.org/node/2424097
- https://www.drupal.org/node/2424101
- https://www.drupal.org/node/2424103
- https://www.drupal.org/node/2424403