NVD

Id
21072  
Name
CVE-2016-6211  
Description
The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2016-09-09  
Modified Date
2016-11-28  
Seq
2016-6211  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
114684 21072 CVE-2016-6211 DSA-3604  View
114685 21072 CVE-2016-6211 [oss-security] 20160713 CVE requests for Drupal Core - SA-CORE-2016-002  View
114686 21072 CVE-2016-6211 [oss-security] 20160713 Re: CVE requests for Drupal Core - SA-CORE-2016-002  View
114687 21072 CVE-2016-6211 91230  View
114688 21072 CVE-2016-6211 https://www.drupal.org/SA-CORE-2016-002  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
3811 JVNDB-2016-004584 Drupal の User モジュールにおける権限を取得される脆弱性 Drupal の User モジュールには、権限を取得される脆弱性が存在します。 CVE-2016-6211 92718 CVE-2016-6211 21072 6.5 8.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-004584.html 2016-06-15 2016-09-12 View