CVE

Id
81666  
CVE No.
CVE-2015-4389  
Status
Candidate  
Description
The Open Graph Importer (og_tag_importer) 7.x-1.x for Drupal does not properly check the create permission for content types created during import, which allows remote authenticated users to bypass intended restrictions by leveraging the "import og_tag_importer" permission.  
Phase
Assigned (20150605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
733382 81666 CVE-2015-4389 MLIST:[oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099)  View
733383 81666 CVE-2015-4389 URL:http://www.openwall.com/lists/oss-security/2015/04/25/6  View
733384 81666 CVE-2015-4389 MISC:https://www.drupal.org/node/2463891  View
733385 81666 CVE-2015-4389 BID:74354  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8484 JVNDB-2015-003804 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における JavaScript API の実行の制限を回避される脆弱性 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、JavaScript API の実行の制限を回避される脆弱性が存在します。 CVE-2015-4441 81666 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003804.html  View