4.3
CVE-2014-5179
- EPSS 1.19%
- Veröffentlicht 06.08.2014 18:55:06
- Zuletzt bearbeitet 06.05.2026 22:30:45
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe freelinking module for Drupal, as used in the Freelinking for Case Tracker module, does not properly check access permissions for (1) nodes or (2) users, which allows remote attackers to obtain sensitive information via a crafted link.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Freelinking For Case Tracker Project ≫ Freelinking For Case Tracker Version- SwPlatformdrupal
Freelinking Project ≫ Freelinking Version- SwPlatformdrupal
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.19% | 0.639 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|
http://www.securityfocus.com/bid/68861
https://exchange.xforce.ibmcloud.com/vulnerabilities/94870
https://www.drupal.org/node/2308503