PT-2016-6801

CVE-2016-6212

Published

2016-09-09

Updated

2022-05-17

Description by

CVSS 3.1

5.3

Medium

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Drupal Views module versions 7.x-3.x before 7.x-3.14 Drupal Views module in Drupal 8.x before 8.1.3

Description The issue might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information.

Recommendations For Drupal 7.x with Views module versions 7.x-3.x before 7.x-3.14, update to version 7.x-3.14 or later. For Drupal 8.x before 8.1.3, update to version 8.1.3 or later.

Exploitability

Exploit

Fix

Impacts

Researchers

Pere Orga

Vendors

Affected products

Weakness enumeration

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Related identifiers

CVE-2016-6212