NVD

Id
24583  
Name
CVE-2015-2559  
Description
Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a crafted password reset URL.  
Reject
 
CVSS Version
2  
CVSS Score
3.5  
Severity
Low  
CVSS Base Score
3.5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-03-25  
Modified Date
2016-08-24  
Seq
2015-2559  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
129553 24583 CVE-2015-2559 DSA-3200  View
129554 24583 CVE-2015-2559 73219  View
129555 24583 CVE-2015-2559 https://www.drupal.org/SA-CORE-2015-001  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19120 JVNDB-2014-007995 Drupal における他のアカウントのパスワードをリセットされる脆弱性 Drupal には、他のアカウントのパスワードをリセットされる脆弱性が存在します。 CVE-2015-2559 79784 CVE-2015-2559 24583 3.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-007995.html 2014-03-18 2015-03-31 View