Moole Vulnerability Database

Find real vulnerabilities before they ship

Unknown

CVE-2015-3231

The Render cache system in Drupal 7.x before 7.38, when used to cache content by user role, allows remote authenticated users to obtain private content viewed by user 1 by reading the cache.

PublishedJun 22, 2015, 19:59

Published Bysecalert@redhat.com

Affected Versions

No affected versions found.

References

http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161261.html
http://lists.fedoraproject.org/pipermail/package-announce/2015-July/161265.html
http://www.debian.org/security/2015/dsa-3291
http://www.securityfocus.com/bid/75286
https://www.drupal.org/SA-CORE-2015-002

Weakness Type

CWE-200

CVSS Metrics

Base Score

Vector String

AV:N/AC:L/Au:S/C:P/I:N/A:N

Base SeverityUnknown

Version

2.0

Attack Vector (AV)