PT-2015-6199

CVE-2015-3379

·

Published

2015-04-21

·

Updated

2015-04-23

Description by

CVSS 2.0
4.0
Medium
MetricsAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Drupal Views module versions prior to 6.x-2.18 Drupal Views module versions 6.x-3.x prior to 6.x-3.2 Drupal Views module versions 7.x-3.x prior to 7.x-3.10
Description The issue allows remote authenticated users to obtain sensitive information due to improper access restriction to default views configurations.
Recommendations For versions prior to 6.x-2.18, update to version 6.x-2.18 or later. For versions 6.x-3.x prior to 6.x-3.2, update to version 6.x-3.2 or later. For versions 7.x-3.x prior to 7.x-3.10, update to version 7.x-3.10 or later.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾