6.5

CVE-2014-9503

The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated users with "access content" permissions to modify arbitrary nodes by leveraging improper access checks on unspecified ajax callbacks.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Open Atrium Project ≫ Open Atrium SwPlatform drupal Version >= 7.x-2.0 < 7.x-2.26
Open Atrium Project ≫ Open Atrium Version 7.x-2.0 Update alpha1 SwPlatform drupal
Open Atrium Project ≫ Open Atrium Version 7.x-2.0 Update alpha2 SwPlatform drupal
Open Atrium Project ≫ Open Atrium Version 7.x-2.0 Update alpha3 SwPlatform drupal
Open Atrium Project ≫ Open Atrium Version 7.x-2.0 Update alpha4 SwPlatform drupal
Open Atrium Project ≫ Open Atrium Version 7.x-2.0 Update alpha5 SwPlatform drupal
Open Atrium Project ≫ Open Atrium Version 7.x-2.0 Update beta1 SwPlatform drupal
Open Atrium Project ≫ Open Atrium Version 7.x-2.0 Update beta2 SwPlatform drupal
Open Atrium Project ≫ Open Atrium Version 7.x-2.0 Update beta3 SwPlatform drupal
Open Atrium Project ≫ Open Atrium Version 7.x-2.0 Update beta4 SwPlatform drupal
Open Atrium Project ≫ Open Atrium Version 7.x-2.0 Update rc1 SwPlatform drupal
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.4% 0.693
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 6.5 2.8 3.6
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
NIST 5.5 8 4.9
AV:N/AC:L/Au:S/C:N/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.openwall.com/lists/oss-security/2015/01/04/6
Third Party Advisory
Mailing List
Issue Tracking
https://www.drupal.org/node/2394979
Vendor Advisory
Mitigation
https://www.drupal.org/node/2395045
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/99656
Third Party Advisory
VDB Entry