CVE-2015-7226
EUVD-2015-715717.09.2015, 16:59
The Administration Views module 7.x-1.x before 7.x-1.5 for Drupal checks access permissions based on the router path from the view instead of the display property, which allows remote attackers to obtain sensitive information via vectors related to the access handler.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| administration_views_project | administration_views | 7.x-1.0:x |
| administration_views_project | administration_views | 7.x-1.0:x |
| administration_views_project | administration_views | 7.x-1.1:x |
| administration_views_project | administration_views | 7.x-1.2:x |
| administration_views_project | administration_views | 7.x-1.3:x |
| administration_views_project | administration_views | 7.x-1.4:x |
| administration_views_project | administration_views | 7.x-1.x:x |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References