medium5.0
CVE-2015-7305
The Scald module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to fields, which allows remote attackers to obtain sensitive atom property…
Impact
The Scald module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to fields, which allows remote attackers to obtain sensitive atom property information via vectors involving a "debug context."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ows | Scald | Versions 7.x-1.0, 7.x-1.1, 7.x-1.2, 7.x-1.3, 7.x-1.4 |