CVE

Id
81652  
CVE No.
CVE-2015-4375  
Status
Candidate  
Description
The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search on custom entities without an access query tag or (2) leveraging knowledge of the ID of an entity.  
Phase
Assigned (20150605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
733310 81652 CVE-2015-4375 MLIST:[oss-security] 20150322 CVE requests for Drupal contributed modules  View
733311 81652 CVE-2015-4375 URL:http://www.openwall.com/lists/oss-security/2015/03/22/35  View
733312 81652 CVE-2015-4375 MLIST:[oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099)  View
733313 81652 CVE-2015-4375 URL:http://www.openwall.com/lists/oss-security/2015/04/25/6  View
733314 81652 CVE-2015-4375 MISC:https://www.drupal.org/node/2454909  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7718 JVNDB-2015-003038 Ektron Content Management System の Test/WorkArea/workarea.aspx におけるクロスサイトスクリプティングの脆弱性 Ektron Content Management System (CMS) の Test/WorkArea/workarea.aspx には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-4427 81652 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003038.html  View