CVE-2015-8232
17.11.2015, 15:59
The UC Profile module 6.x-1.x before 6.x-1.3 for Drupal does not properly check access to profiles in certain circumstances, which might allow remote attackers to obtain sensitive information from the anonymous user profile via unspecified vectors.Enginsight
| Vendor | Product | Version |
|---|---|---|
| uc_profile_project | uc_profile | 6.x-1.1:x |
| uc_profile_project | uc_profile | 6.x-1.1:x |
| uc_profile_project | uc_profile | 6.x-1.1:x |
| uc_profile_project | uc_profile | 6.x-1.1:x |
| uc_profile_project | uc_profile | 6.x-1.2:x |
𝑥
= Vulnerable software versions
Common Weakness Enumeration