NVD

Id
83313  
Name
CVE-2017-6381  
Description
A 3rd party development library including with Drupal 8 development dependencies is vulnerable to remote code execution. This is mitigated by the default .htaccess protection against PHP execution, and the fact that Composer development dependencies aren't normal installed. You might be vulnerable to this if you are running a version of Drupal before 8.2.2. To be sure you aren't vulnerable, you can remove the <siteroot>/vendor/phpunit directory from your production deployments  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-03-16  
Modified Date
2017-07-11  
Seq
2017-6381  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
409581 83313 CVE-2016-7611 94907  View
409582 83313 CVE-2016-7611 https://support.apple.com/HT207421  View
409583 83313 CVE-2016-7611 https://support.apple.com/HT207422  View
409584 83313 CVE-2016-7611 https://support.apple.com/HT207424  View
409585 83313 CVE-2016-7611 https://support.apple.com/HT207427  View
409586 83313 CVE-2016-7611 94907  View
409587 83313 CVE-2016-7611 https://support.apple.com/HT207421  View
409588 83313 CVE-2016-7611 https://support.apple.com/HT207422  View
409589 83313 CVE-2016-7611 https://support.apple.com/HT207424  View
409590 83313 CVE-2016-7611 https://support.apple.com/HT207427  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66164 JVNDB-2017-002503 Drupal における不適切なアクセス制御に関する脆弱性 Drupal には、不適切なアクセス制御に関する脆弱性が存在します。 CVE-2017-6381 CVE-2017-6381 83313 6.8 8.1 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002503.html 2017-03-15 2017-04-18 View