NVD

Id
25813  
Name
CVE-2015-4355  
Description
Cross-site request forgery (CSRF) vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-06-15  
Modified Date
2016-06-09  
Seq
2015-4355  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
136160 25813 CVE-2015-4355 [oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099)  View
136161 25813 CVE-2015-4355 72810  View
136162 25813 CVE-2015-4355 https://www.drupal.org/node/2437993  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7779 JVNDB-2015-003099 Drupal 用 Watchdog Aggregator モジュールにおけるクロスサイトリクエストフォージェリの脆弱性 Drupal 用 Watchdog Aggregator モジュールには、クロスサイトリクエストフォージェリの脆弱性が存在します。 CVE-2015-4355 81580 CVE-2015-4355 25813 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003099.html 2015-02-25 2015-06-17 View