4.3
CVE-2015-8232
- EPSS 0.25%
- Veröffentlicht 17.11.2015 15:59:25
- Zuletzt bearbeitet 12.04.2025 10:46:40
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginThe UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumstances, which might allow remote attackers to obtain sensitive information from the anonymous user profile via unspecified vectors.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Uc Profile Project ≫ Uc Profile Version6.x-1.1 SwPlatformdrupal
Uc Profile Project ≫ Uc Profile Version6.x-1.1 Updaterc1 SwPlatformdrupal
Uc Profile Project ≫ Uc Profile Version6.x-1.1 Updaterc2 SwPlatformdrupal
Uc Profile Project ≫ Uc Profile Version6.x-1.1 Updaterc3 SwPlatformdrupal
Uc Profile Project ≫ Uc Profile Version6.x-1.2 SwPlatformdrupal
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.25% | 0.455 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 8.6 | 2.9 |
AV:N/AC:M/Au:N/C:P/I:N/A:N
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.