CVE-2016-7572 Drupal Unprivileged access to config export
MediumCVSS 4.3
EPSS 1.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for "Export configuration" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal/core(Packagist) | >= 8.0, < 8.1.10 | 8.1.10 |
| drupal/core(Packagist) | = 8.0.0 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-beta10 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-beta11 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-beta12 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-beta13 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-beta14 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-beta15 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-beta16 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-beta6 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-beta7 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-beta8 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-beta9 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-rc1 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-rc2 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-rc3 | No fix listed |
| drupal/core(Packagist) | = 8.0.0-rc4 | No fix listed |
| drupal/core(Packagist) | = 8.0.1 | No fix listed |
| drupal/core(Packagist) | = 8.0.2 | No fix listed |
| drupal/core(Packagist) | = 8.0.3 | No fix listed |
| drupal/core(Packagist) | = 8.0.4 | No fix listed |
| drupal/core(Packagist) | = 8.0.5 | No fix listed |
| drupal/core(Packagist) | = 8.0.6 | No fix listed |
| drupal/core(Packagist) | = 8.1.0 | No fix listed |
| drupal/core(Packagist) | = 8.1.0-beta1 | No fix listed |
Show 105 more
| Product | Affected versions | Fixed in |
|---|---|---|
| drupal/core(Packagist) | = 8.1.0-beta2 | No fix listed |
| drupal/core(Packagist) | = 8.1.0-rc1 | No fix listed |
| drupal/core(Packagist) | = 8.1.1 | No fix listed |
| drupal/core(Packagist) | = 8.1.2 | No fix listed |
| drupal/core(Packagist) | = 8.1.3 | No fix listed |
| drupal/core(Packagist) | = 8.1.4 | No fix listed |
| drupal/core(Packagist) | = 8.1.5 | No fix listed |
| drupal/core(Packagist) | = 8.1.6 | No fix listed |
| drupal/core(Packagist) | = 8.1.7 | No fix listed |
| drupal/core(Packagist) | = 8.1.8 | No fix listed |
| drupal/core(Packagist) | = 8.1.9 | No fix listed |
| drupal/drupal(Packagist) | >= 8.0, < 8.1.10 | 8.1.10 |
| drupal/drupal(Packagist) | = 8.0.0 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-alpha14 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-alpha15 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta1 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta10 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta11 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta12 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta13 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta14 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta15 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta16 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta2 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta3 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta4 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta5 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta6 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta7 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-beta9 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-rc1 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-rc2 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-rc3 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.0-rc4 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.1 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.2 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.3 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.4 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.5 | No fix listed |
| drupal/drupal(Packagist) | = 8.0.6 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.0 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.0-beta1 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.0-beta2 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.0-rc1 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.1 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.2 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.3 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.4 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.5 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.6 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.7 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.8 | No fix listed |
| drupal/drupal(Packagist) | = 8.1.9 | No fix listed |
| drupal/drupal | = 8.0.0 | No fix listed |
| drupal/drupal | = 8.0.0-alpha10 | No fix listed |
| drupal/drupal | = 8.0.0-alpha11 | No fix listed |
| drupal/drupal | = 8.0.0-alpha12 | No fix listed |
| drupal/drupal | = 8.0.0-alpha13 | No fix listed |
| drupal/drupal | = 8.0.0-alpha14 | No fix listed |
| drupal/drupal | = 8.0.0-alpha15 | No fix listed |
| drupal/drupal | = 8.0.0-alpha2 | No fix listed |
| drupal/drupal | = 8.0.0-alpha3 | No fix listed |
| drupal/drupal | = 8.0.0-alpha4 | No fix listed |
| drupal/drupal | = 8.0.0-alpha5 | No fix listed |
| drupal/drupal | = 8.0.0-alpha6 | No fix listed |
| drupal/drupal | = 8.0.0-alpha7 | No fix listed |
| drupal/drupal | = 8.0.0-alpha8 | No fix listed |
| drupal/drupal | = 8.0.0-alpha9 | No fix listed |
| drupal/drupal | = 8.0.0-beta1 | No fix listed |
| drupal/drupal | = 8.0.0-beta10 | No fix listed |
| drupal/drupal | = 8.0.0-beta11 | No fix listed |
| drupal/drupal | = 8.0.0-beta12 | No fix listed |
| drupal/drupal | = 8.0.0-beta13 | No fix listed |
| drupal/drupal | = 8.0.0-beta14 | No fix listed |
| drupal/drupal | = 8.0.0-beta15 | No fix listed |
| drupal/drupal | = 8.0.0-beta16 | No fix listed |
| drupal/drupal | = 8.0.0-beta2 | No fix listed |
| drupal/drupal | = 8.0.0-beta3 | No fix listed |
| drupal/drupal | = 8.0.0-beta4 | No fix listed |
| drupal/drupal | = 8.0.0-beta6 | No fix listed |
| drupal/drupal | = 8.0.0-beta7 | No fix listed |
| drupal/drupal | = 8.0.0-beta9 | No fix listed |
| drupal/drupal | = 8.0.0-rc1 | No fix listed |
| drupal/drupal | = 8.0.0-rc2 | No fix listed |
| drupal/drupal | = 8.0.0-rc3 | No fix listed |
| drupal/drupal | = 8.0.0-rc4 | No fix listed |
| drupal/drupal | = 8.0.1 | No fix listed |
| drupal/drupal | = 8.0.2 | No fix listed |
| drupal/drupal | = 8.0.3 | No fix listed |
| drupal/drupal | = 8.0.4 | No fix listed |
| drupal/drupal | = 8.0.5 | No fix listed |
| drupal/drupal | = 8.0.6 | No fix listed |
| drupal/drupal | = 8.1.0 | No fix listed |
| drupal/drupal | = 8.1.0-beta1 | No fix listed |
| drupal/drupal | = 8.1.0-beta2 | No fix listed |
| drupal/drupal | = 8.1.0-rc1 | No fix listed |
| drupal/drupal | = 8.1.1 | No fix listed |
| drupal/drupal | = 8.1.2 | No fix listed |
| drupal/drupal | = 8.1.3 | No fix listed |
| drupal/drupal | = 8.1.4 | No fix listed |
| drupal/drupal | = 8.1.5 | No fix listed |
| drupal/drupal | = 8.1.6 | No fix listed |
| drupal/drupal | = 8.1.7 | No fix listed |
| drupal/drupal | = 8.1.8 | No fix listed |
| drupal/drupal | = 8.1.9 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com exploit
- github.com exploit
- github.com product
- www.drupal.org vendor-advisory
- 93101 third-party-advisory vdb-entry
- 1036886 third-party-advisory vdb-entry
- github.com