CVE-2015-8232

EUVD-2015-8121
The UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumstances, which might allow remote attackers to obtain sensitive information from the anonymous user profile via unspecified vectors.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 47%
Affected Products (NVD)
VendorProductVersion
uc_profile_projectuc_profile
6.x-1.1:x
uc_profile_projectuc_profile
6.x-1.1:x
uc_profile_projectuc_profile
6.x-1.1:x
uc_profile_projectuc_profile
6.x-1.1:x
uc_profile_projectuc_profile
6.x-1.2:x
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://www.drupal.org/node/2612812
https://www.drupal.org/node/2613444
https://www.drupal.org/node/2612812
https://www.drupal.org/node/2613444