5.3

CVE-2016-3170

The "have you forgotten your password" links in the User module in Drupal 7.x before 7.43 and 8.x before 8.0.4 allow remote attackers to obtain sensitive username information by leveraging a configuration that permits using an email address to login and a module that permits logging in.

Data is provided by the National Vulnerability Database (NVD)
Debian ≫ Debian Linux Version7.0
Debian ≫ Debian Linux Version8.0
Drupal ≫ Drupal Version7.0
Drupal ≫ Drupal Version7.0 Updatealpha1
Drupal ≫ Drupal Version7.0 Updatealpha2
Drupal ≫ Drupal Version7.0 Updatealpha3
Drupal ≫ Drupal Version7.0 Updatealpha4
Drupal ≫ Drupal Version7.0 Updatealpha5
Drupal ≫ Drupal Version7.0 Updatealpha6
Drupal ≫ Drupal Version7.0 Updatealpha7
Drupal ≫ Drupal Version7.0 Updatebeta1
Drupal ≫ Drupal Version7.0 Updatebeta2
Drupal ≫ Drupal Version7.0 Updatebeta3
Drupal ≫ Drupal Version7.0 Updatedev
Drupal ≫ Drupal Version7.0 Updaterc1
Drupal ≫ Drupal Version7.0 Updaterc2
Drupal ≫ Drupal Version7.0 Updaterc3
Drupal ≫ Drupal Version7.0 Updaterc4
Drupal ≫ Drupal Version7.1
Drupal ≫ Drupal Version7.2
Drupal ≫ Drupal Version7.3
Drupal ≫ Drupal Version7.4
Drupal ≫ Drupal Version7.5
Drupal ≫ Drupal Version7.6
Drupal ≫ Drupal Version7.7
Drupal ≫ Drupal Version7.8
Drupal ≫ Drupal Version7.9
Drupal ≫ Drupal Version7.10
Drupal ≫ Drupal Version7.11
Drupal ≫ Drupal Version7.12
Drupal ≫ Drupal Version7.13
Drupal ≫ Drupal Version7.14
Drupal ≫ Drupal Version7.15
Drupal ≫ Drupal Version7.16
Drupal ≫ Drupal Version7.17
Drupal ≫ Drupal Version7.18
Drupal ≫ Drupal Version7.19
Drupal ≫ Drupal Version7.20
Drupal ≫ Drupal Version7.21
Drupal ≫ Drupal Version7.22
Drupal ≫ Drupal Version7.23
Drupal ≫ Drupal Version7.24
Drupal ≫ Drupal Version7.25
Drupal ≫ Drupal Version7.26
Drupal ≫ Drupal Version7.27
Drupal ≫ Drupal Version7.28
Drupal ≫ Drupal Version7.29
Drupal ≫ Drupal Version7.30
Drupal ≫ Drupal Version7.33
Drupal ≫ Drupal Version7.34
Drupal ≫ Drupal Version7.35
Drupal ≫ Drupal Version7.36
Drupal ≫ Drupal Version7.37
Drupal ≫ Drupal Version7.38
Drupal ≫ Drupal Version7.39
Drupal ≫ Drupal Version7.40
Drupal ≫ Drupal Version7.41
Drupal ≫ Drupal Version7.42
Drupal ≫ Drupal Version7.x-dev
Drupal ≫ Drupal Version8.0 Updatealpha10
Drupal ≫ Drupal Version8.0 Updatealpha11
Drupal ≫ Drupal Version8.0 Updatealpha12
Drupal ≫ Drupal Version8.0 Updatealpha13
Drupal ≫ Drupal Version8.0 Updatealpha14
Drupal ≫ Drupal Version8.0 Updatealpha15
Drupal ≫ Drupal Version8.0 Updatealpha2
Drupal ≫ Drupal Version8.0 Updatealpha3
Drupal ≫ Drupal Version8.0 Updatealpha4
Drupal ≫ Drupal Version8.0 Updatealpha5
Drupal ≫ Drupal Version8.0 Updatealpha6
Drupal ≫ Drupal Version8.0 Updatealpha7
Drupal ≫ Drupal Version8.0 Updatealpha8
Drupal ≫ Drupal Version8.0 Updatealpha9
Drupal ≫ Drupal Version8.0 Updatebeta1
Drupal ≫ Drupal Version8.0 Updatebeta10
Drupal ≫ Drupal Version8.0 Updatebeta11
Drupal ≫ Drupal Version8.0 Updatebeta12
Drupal ≫ Drupal Version8.0 Updatebeta13
Drupal ≫ Drupal Version8.0 Updatebeta14
Drupal ≫ Drupal Version8.0 Updatebeta15
Drupal ≫ Drupal Version8.0 Updatebeta16
Drupal ≫ Drupal Version8.0 Updatebeta2
Drupal ≫ Drupal Version8.0 Updatebeta3
Drupal ≫ Drupal Version8.0 Updatebeta4
Drupal ≫ Drupal Version8.0 Updatebeta6
Drupal ≫ Drupal Version8.0 Updatebeta7
Drupal ≫ Drupal Version8.0 Updatebeta9
Drupal ≫ Drupal Version8.0 Updaterc1
Drupal ≫ Drupal Version8.0 Updaterc2
Drupal ≫ Drupal Version8.0 Updaterc3
Drupal ≫ Drupal Version8.0 Updaterc4
Drupal ≫ Drupal Version8.0.1
Drupal ≫ Drupal Version8.0.2
Drupal ≫ Drupal Version8.0.3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.5% 0.651
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 5.3 3.9 1.4
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.