CVE-2015-7226 The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obt...
MediumCVSS 5.0
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| administration views project administration views | = 7.x-1.0 | No fix listed |
| administration views project administration views | = 7.x-1.0-rc1 | No fix listed |
| administration views project administration views | = 7.x-1.1 | No fix listed |
| administration views project administration views | = 7.x-1.2 | No fix listed |
| administration views project administration views | = 7.x-1.3 | No fix listed |
| administration views project administration views | = 7.x-1.4 | No fix listed |
| administration views project administration views | = 7.x-1.x-dev | No fix listed |
References
- cgit.drupalcode.org
- 75697 vdb-entry
- www.drupal.org patch
- www.drupal.org patch vendor-advisory