CVE-2014-8735 The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" perm...
MediumCVSS 4.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" permission to obtain sensitive information by reading a log file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bad behavior project bad behavior | = 6.x-1.0-rc1 | No fix listed |
| bad behavior project bad behavior | = 6.x-1.0-rc2 | No fix listed |
| bad behavior project bad behavior | = 6.x-1.x-dev | No fix listed |
| bad behavior project bad behavior | = 6.x-2.1 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.2-rc14 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.13 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.14 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.113 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.114 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.115 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.116 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.200-rc14 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.214 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.215 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.216 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.217 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.220 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.221 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.222 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.223 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.225 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.226 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.227 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.228 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.2210 | No fix listed |
Show 21 more
| Product | Affected versions | Fixed in |
|---|---|---|
| bad behavior project bad behavior | = 6.x-2.2211 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.2212 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.2213 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.2214 | No fix listed |
| bad behavior project bad behavior | = 6.x-2.2215 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.220 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.221 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.222 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.223 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.225 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.226 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.227 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.228 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.2210 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.2211 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.2212 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.2213 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.2214 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.2215 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.2216 | No fix listed |
| bad behavior project bad behavior | = 7.x-2.x-dev | No fix listed |
References
- www.drupal.org patch third-party-advisory
- www.drupal.org patch third-party-advisory
- www.drupal.org patch third-party-advisory