medium5.0
CVE-2015-5496
The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via unspecified vectors.
Impact
The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pass2pdf Project | Pass2pdf | All versions |