PT-2016-5399

CVE-2016-3170

·

Publicado

2016-02-28

·

Atualizado

2022-05-17

Descrição por

CVSS 3.1
5.3
Média
MétricasAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Drupal versions 7.x before 7.43 Drupal versions 8.x before 8.0.4
Description The issue allows remote attackers to obtain sensitive username information. This is possible by leveraging a configuration that permits using an email address to login and a module that permits logging in.
Recommendations For Drupal 7.x, update to version 7.43 or later. For Drupal 8.x, update to version 8.0.4 or later.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
Identificadores relacionados
CVE-2016-3170
GHSA-PQV4-XGQH-J8VH
DSA-3498-1
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com