CVE-2015-8601 The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restri...
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Chat Room module 7.x-2.x before 7.x-2.2 for Drupal does not properly check permissions when setting up a websocket for chat messages, which allows remote attackers to bypass intended access restrictions and read messages from arbitrary Chat Rooms via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| chat room project chat room | = 7.x-2.0 | No fix listed |
| chat room project chat room | = 7.x-2.1 | No fix listed |
References
- www.drupal.org patch
- www.drupal.org patch vendor-advisory