NVD

Id
26641  
Name
CVE-2015-5502  
Description
The Storage API module 7.x-1.x before 7.x-1.8 for Drupal does not properly restrict access to Storage API fields attached to entities that are not nodes, which allows remote attackers to have unspecified impact via unknown vectors.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-08-18  
Modified Date
2016-11-28  
Seq
2015-5502  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
140939 26641 CVE-2015-5502 [oss-security] 20150704 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-100 to SA-CONTRIB-2015-131)  View
140940 26641 CVE-2015-5502 74867  View
140941 26641 CVE-2015-5502 https://www.drupal.org/node/2495895  View
140942 26641 CVE-2015-5502 https://www.drupal.org/node/2495903  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9063 JVNDB-2015-004383 Drupal 用 Storage API モジュールにおける脆弱性 Drupal 用 Storage API モジュールは、ノードではないエンティティに付随する Storage API フィールドへのアクセスを適切に制限しないため、不特定の影響を受ける脆弱性が存在します。 CVE-2015-5502 82727 CVE-2015-5502 26641 7.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-004383.html 2015-05-27 2015-08-25 View