Vulnerability-Lookup

CVE-2015-5509 (GCVE-0-2015-5509)

Vulnerability from cvelistv5 – Published: 2015-08-18 17:00 – Updated: 2024-08-06 06:50

Summary

The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors.

Severity

No CVSS data available.

CWE

Assigner

mitre

References

4 references

URL	Tags
https://www.drupal.org/node/2430043	x_refsource_CONFIRM
http://www.securityfocus.com/bid/75278	vdb-entryx_refsource_BID
https://www.drupal.org/node/2507645	x_refsource_MISC
http://www.openwall.com/lists/oss-security/2015/07/04/4	mailing-listx_refsource_MLIST

Date Public

2015-02-20 00:00

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T06:50:02.569Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_CONFIRM",
              "x_transferred"
            ],
            "url": "https://www.drupal.org/node/2430043"
          },
          {
            "name": "75278",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/75278"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.drupal.org/node/2507645"
          },
          {
            "name": "[oss-security] 20150704 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-100 to SA-CONTRIB-2015-131)",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2015/07/04/4"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2015-02-20T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-11-25T19:57:01.000Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_CONFIRM"
          ],
          "url": "https://www.drupal.org/node/2430043"
        },
        {
          "name": "75278",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/75278"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.drupal.org/node/2507645"
        },
        {
          "name": "[oss-security] 20150704 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-100 to SA-CONTRIB-2015-131)",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2015/07/04/4"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-5509",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.drupal.org/node/2430043",
              "refsource": "CONFIRM",
              "url": "https://www.drupal.org/node/2430043"
            },
            {
              "name": "75278",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/75278"
            },
            {
              "name": "https://www.drupal.org/node/2507645",
              "refsource": "MISC",
              "url": "https://www.drupal.org/node/2507645"
            },
            {
              "name": "[oss-security] 20150704 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-100 to SA-CONTRIB-2015-131)",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2015/07/04/4"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2015-5509",
    "datePublished": "2015-08-18T17:00:00.000Z",
    "dateReserved": "2015-07-10T00:00:00.000Z",
    "dateUpdated": "2024-08-06T06:50:02.569Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2015-5509",
      "date": "2026-07-27",
      "epss": "0.01215",
      "percentile": "0.65396"
    },
    "fkie_nvd": {
      "configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:administration_views_project:administration_views:7.x-1.0:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"12E31109-601D-4962-998C-0AE06A4A2587\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:administration_views_project:administration_views:7.x-1.0:rc1:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"D2375B7C-3AEE-44D5-B851-337259C60862\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:administration_views_project:administration_views:7.x-1.1:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"0BB101A0-9F5E-4ACF-85F4-2FB747811469\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:administration_views_project:administration_views:7.x-1.2:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"BE803C20-D397-445C-8932-E659ABAA1F8D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:administration_views_project:administration_views:7.x-1.x:dev:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"C9613673-C043-46CA-BF5E-B37533834693\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors.\"}, {\"lang\": \"es\", \"value\": \"Vulnerabilidad en el m\\u00f3dulo Administration Views 7.x-1.x en versiones anteriores a 7.x-1.4 para Drupal, cuando se utiliza con otros m\\u00f3dulos no especificados, no garantiza adecuadamente acceso a las p\\u00e1ginas de administraci\\u00f3n, lo que permite a administradores remotos eludir las restricciones previstas a trav\\u00e9s de vectores no especificados.\"}]",
      "id": "CVE-2015-5509",
      "lastModified": "2024-11-21T02:33:10.370",
      "metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:M/Au:S/C:P/I:P/A:P\", \"baseScore\": 6.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"MEDIUM\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"PARTIAL\", \"availabilityImpact\": \"PARTIAL\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 6.8, \"impactScore\": 6.4, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
      "published": "2015-08-18T18:00:14.770",
      "references": "[{\"url\": \"http://www.openwall.com/lists/oss-security/2015/07/04/4\", \"source\": \"cve@mitre.org\"}, {\"url\": \"http://www.securityfocus.com/bid/75278\", \"source\": \"cve@mitre.org\"}, {\"url\": \"https://www.drupal.org/node/2430043\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\"]}, {\"url\": \"https://www.drupal.org/node/2507645\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}, {\"url\": \"http://www.openwall.com/lists/oss-security/2015/07/04/4\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"http://www.securityfocus.com/bid/75278\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\"}, {\"url\": \"https://www.drupal.org/node/2430043\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\"]}, {\"url\": \"https://www.drupal.org/node/2507645\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Vendor Advisory\"]}]",
      "sourceIdentifier": "cve@mitre.org",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-264\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2015-5509\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2015-08-18T18:00:14.770\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors.\"},{\"lang\":\"es\",\"value\":\"Vulnerabilidad en el m\u00f3dulo Administration Views 7.x-1.x en versiones anteriores a 7.x-1.4 para Drupal, cuando se utiliza con otros m\u00f3dulos no especificados, no garantiza adecuadamente acceso a las p\u00e1ginas de administraci\u00f3n, lo que permite a administradores remotos eludir las restricciones previstas a trav\u00e9s de vectores no especificados.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:M/Au:S/C:P/I:P/A:P\",\"baseScore\":6.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"MEDIUM\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"PARTIAL\",\"availabilityImpact\":\"PARTIAL\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":6.8,\"impactScore\":6.4,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-264\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:administration_views_project:administration_views:7.x-1.0:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"12E31109-601D-4962-998C-0AE06A4A2587\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:administration_views_project:administration_views:7.x-1.0:rc1:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"D2375B7C-3AEE-44D5-B851-337259C60862\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:administration_views_project:administration_views:7.x-1.1:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"0BB101A0-9F5E-4ACF-85F4-2FB747811469\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:administration_views_project:administration_views:7.x-1.2:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"BE803C20-D397-445C-8932-E659ABAA1F8D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:administration_views_project:administration_views:7.x-1.x:dev:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"C9613673-C043-46CA-BF5E-B37533834693\"}]}]}],\"references\":[{\"url\":\"http://www.openwall.com/lists/oss-security/2015/07/04/4\",\"source\":\"cve@mitre.org\"},{\"url\":\"http://www.securityfocus.com/bid/75278\",\"source\":\"cve@mitre.org\"},{\"url\":\"https://www.drupal.org/node/2430043\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\"]},{\"url\":\"https://www.drupal.org/node/2507645\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Vendor Advisory\"]},{\"url\":\"http://www.openwall.com/lists/oss-security/2015/07/04/4\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"http://www.securityfocus.com/bid/75278\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\"},{\"url\":\"https://www.drupal.org/node/2430043\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\"]},{\"url\":\"https://www.drupal.org/node/2507645\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Vendor Advisory\"]}]}}"
  }
}

CNVD-2015-04064

Vulnerability from cnvd - Published: 2015-06-29

Title

Drupal Administration Views模块访问绕过漏洞

Description

Drupal是一套用PHP语言开发的免费、开源的内容管理系统。 Drupal Administration Views模块存在访问绕过漏洞，允许攻击者可利用漏洞获取敏感信息。

Severity

中

Patch Name

Drupal Administration Views模块访问绕过漏洞的补丁

Patch Description

Drupal是一套用PHP语言开发的免费、开源的内容管理系统。Drupal Administration Views模块存在访问绕过漏洞，允许攻击者可利用漏洞获取敏感信息。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。

Formal description

用户可参考如下厂商提供的安全公告获取补丁以修复该漏洞： https://www.drupal.org/node/2430043

Reference

http://www.securityfocus.com/bid/75278

Impacted products

Name
Drupal Administration Views Module 7.x-1.x(<7.x-1.4)

Show details on source website

JSON

To clipboard

{
  "bids": {
    "bid": {
      "bidNumber": "75278"
    }
  },
  "cves": {
    "cve": {
      "cveNumber": "CVE-2015-5509"
    }
  },
  "description": "Drupal\u662f\u4e00\u5957\u7528PHP\u8bed\u8a00\u5f00\u53d1\u7684\u514d\u8d39\u3001\u5f00\u6e90\u7684\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf\u3002\r\n\r\nDrupal Administration Views\u6a21\u5757\u5b58\u5728\u8bbf\u95ee\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002",
  "discovererName": "Barry Fisher",
  "formalWay": "\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0b\u5382\u5546\u63d0\u4f9b\u7684\u5b89\u5168\u516c\u544a\u83b7\u53d6\u8865\u4e01\u4ee5\u4fee\u590d\u8be5\u6f0f\u6d1e\uff1a\r\nhttps://www.drupal.org/node/2430043",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2015-04064",
  "openTime": "2015-06-29",
  "patchDescription": "Drupal\u662f\u4e00\u5957\u7528PHP\u8bed\u8a00\u5f00\u53d1\u7684\u514d\u8d39\u3001\u5f00\u6e90\u7684\u5185\u5bb9\u7ba1\u7406\u7cfb\u7edf\u3002Drupal Administration Views\u6a21\u5757\u5b58\u5728\u8bbf\u95ee\u7ed5\u8fc7\u6f0f\u6d1e\uff0c\u5141\u8bb8\u653b\u51fb\u8005\u53ef\u5229\u7528\u6f0f\u6d1e\u83b7\u53d6\u654f\u611f\u4fe1\u606f\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Drupal Administration Views\u6a21\u5757\u8bbf\u95ee\u7ed5\u8fc7\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": "Drupal Administration Views Module 7.x-1.x(\u003c7.x-1.4)"
  },
  "referenceLink": "http://www.securityfocus.com/bid/75278",
  "serverity": "\u4e2d",
  "submitTime": "2015-06-26",
  "title": "Drupal Administration Views\u6a21\u5757\u8bbf\u95ee\u7ed5\u8fc7\u6f0f\u6d1e"
}

FKIE_CVE-2015-5509

Vulnerability from fkie_nvd - Published: 2015-08-18 18:00 - Updated: 2026-06-17 00:29

Severity

Summary

References

URL	Tags
cve@mitre.org	http://www.openwall.com/lists/oss-security/2015/07/04/4
cve@mitre.org	http://www.securityfocus.com/bid/75278
cve@mitre.org	https://www.drupal.org/node/2430043	Patch
cve@mitre.org	https://www.drupal.org/node/2507645	Patch, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108	http://www.openwall.com/lists/oss-security/2015/07/04/4
af854a3a-2127-422b-91ae-364da2661108	http://www.securityfocus.com/bid/75278
af854a3a-2127-422b-91ae-364da2661108	https://www.drupal.org/node/2430043	Patch
af854a3a-2127-422b-91ae-364da2661108	https://www.drupal.org/node/2507645	Patch, Vendor Advisory

Impacted products

Vendor	Product	Version
administration_views_project	administration_views	7.x-1.0
administration_views_project	administration_views	7.x-1.0
administration_views_project	administration_views	7.x-1.1
administration_views_project	administration_views	7.x-1.2
administration_views_project	administration_views	7.x-1.x

JSON

To clipboard

{
  "affected": [
    {
      "affectedData": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "source": "cve@mitre.org"
    }
  ],
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:administration_views_project:administration_views:7.x-1.0:*:*:*:*:drupal:*:*",
              "matchCriteriaId": "12E31109-601D-4962-998C-0AE06A4A2587",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:administration_views_project:administration_views:7.x-1.0:rc1:*:*:*:drupal:*:*",
              "matchCriteriaId": "D2375B7C-3AEE-44D5-B851-337259C60862",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:administration_views_project:administration_views:7.x-1.1:*:*:*:*:drupal:*:*",
              "matchCriteriaId": "0BB101A0-9F5E-4ACF-85F4-2FB747811469",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:administration_views_project:administration_views:7.x-1.2:*:*:*:*:drupal:*:*",
              "matchCriteriaId": "BE803C20-D397-445C-8932-E659ABAA1F8D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:administration_views_project:administration_views:7.x-1.x:dev:*:*:*:drupal:*:*",
              "matchCriteriaId": "C9613673-C043-46CA-BF5E-B37533834693",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en el m\u00f3dulo Administration Views 7.x-1.x en versiones anteriores a 7.x-1.4 para Drupal, cuando se utiliza con otros m\u00f3dulos no especificados, no garantiza adecuadamente acceso a las p\u00e1ginas de administraci\u00f3n, lo que permite a administradores remotos eludir las restricciones previstas a trav\u00e9s de vectores no especificados."
    }
  ],
  "id": "CVE-2015-5509",
  "lastModified": "2026-06-17T00:29:15.010",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "SINGLE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 6.0,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 6.8,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2015-08-18T18:00:14.770",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://www.openwall.com/lists/oss-security/2015/07/04/4"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/75278"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "https://www.drupal.org/node/2430043"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.drupal.org/node/2507645"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.openwall.com/lists/oss-security/2015/07/04/4"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/75278"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "https://www.drupal.org/node/2430043"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "url": "https://www.drupal.org/node/2507645"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

GHSA-M8CW-5CM7-7FWF

Vulnerability from github – Published: 2022-05-17 03:44 – Updated: 2022-05-17 03:44

Details

Show details on source website

JSON

To clipboard

{
  "affected": [],
  "aliases": [
    "CVE-2015-5509"
  ],
  "database_specific": {
    "cwe_ids": [],
    "github_reviewed": false,
    "github_reviewed_at": null,
    "nvd_published_at": "2015-08-18T18:00:00Z",
    "severity": "MODERATE"
  },
  "details": "The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors.",
  "id": "GHSA-m8cw-5cm7-7fwf",
  "modified": "2022-05-17T03:44:32Z",
  "published": "2022-05-17T03:44:32Z",
  "references": [
    {
      "type": "ADVISORY",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2015-5509"
    },
    {
      "type": "WEB",
      "url": "https://www.drupal.org/node/2430043"
    },
    {
      "type": "WEB",
      "url": "https://www.drupal.org/node/2507645"
    },
    {
      "type": "WEB",
      "url": "http://www.openwall.com/lists/oss-security/2015/07/04/4"
    },
    {
      "type": "WEB",
      "url": "http://www.securityfocus.com/bid/75278"
    }
  ],
  "schema_version": "1.4.0",
  "severity": []
}

GSD-2015-5509

Vulnerability from gsd - Updated: 2023-12-13 01:20

Details

Aliases

CVE-2015-5509

Aliases

CVE-2015-5509

JSON

To clipboard

{
  "GSD": {
    "alias": "CVE-2015-5509",
    "description": "The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors.",
    "id": "GSD-2015-5509"
  },
  "gsd": {
    "metadata": {
      "exploitCode": "unknown",
      "remediation": "unknown",
      "reportConfidence": "confirmed",
      "type": "vulnerability"
    },
    "osvSchema": {
      "aliases": [
        "CVE-2015-5509"
      ],
      "details": "The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors.",
      "id": "GSD-2015-5509",
      "modified": "2023-12-13T01:20:06.429202Z",
      "schema_version": "1.4.0"
    }
  },
  "namespaces": {
    "cve.org": {
      "CVE_data_meta": {
        "ASSIGNER": "cve@mitre.org",
        "ID": "CVE-2015-5509",
        "STATE": "PUBLIC"
      },
      "affects": {
        "vendor": {
          "vendor_data": [
            {
              "product": {
                "product_data": [
                  {
                    "product_name": "n/a",
                    "version": {
                      "version_data": [
                        {
                          "version_value": "n/a"
                        }
                      ]
                    }
                  }
                ]
              },
              "vendor_name": "n/a"
            }
          ]
        }
      },
      "data_format": "MITRE",
      "data_type": "CVE",
      "data_version": "4.0",
      "description": {
        "description_data": [
          {
            "lang": "eng",
            "value": "The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors."
          }
        ]
      },
      "problemtype": {
        "problemtype_data": [
          {
            "description": [
              {
                "lang": "eng",
                "value": "n/a"
              }
            ]
          }
        ]
      },
      "references": {
        "reference_data": [
          {
            "name": "https://www.drupal.org/node/2430043",
            "refsource": "CONFIRM",
            "url": "https://www.drupal.org/node/2430043"
          },
          {
            "name": "75278",
            "refsource": "BID",
            "url": "http://www.securityfocus.com/bid/75278"
          },
          {
            "name": "https://www.drupal.org/node/2507645",
            "refsource": "MISC",
            "url": "https://www.drupal.org/node/2507645"
          },
          {
            "name": "[oss-security] 20150704 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-100 to SA-CONTRIB-2015-131)",
            "refsource": "MLIST",
            "url": "http://www.openwall.com/lists/oss-security/2015/07/04/4"
          }
        ]
      }
    },
    "nvd.nist.gov": {
      "configurations": {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:a:administration_views_project:administration_views:7.x-1.1:*:*:*:*:drupal:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:administration_views_project:administration_views:7.x-1.2:*:*:*:*:drupal:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:administration_views_project:administration_views:7.x-1.0:rc1:*:*:*:drupal:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:administration_views_project:administration_views:7.x-1.x:dev:*:*:*:drupal:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:a:administration_views_project:administration_views:7.x-1.0:*:*:*:*:drupal:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      },
      "cve": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2015-5509"
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "en",
              "value": "The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "en",
                  "value": "CWE-264"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "[oss-security] 20150704 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-100 to SA-CONTRIB-2015-131)",
              "refsource": "MLIST",
              "tags": [],
              "url": "http://www.openwall.com/lists/oss-security/2015/07/04/4"
            },
            {
              "name": "https://www.drupal.org/node/2507645",
              "refsource": "MISC",
              "tags": [
                "Patch",
                "Vendor Advisory"
              ],
              "url": "https://www.drupal.org/node/2507645"
            },
            {
              "name": "https://www.drupal.org/node/2430043",
              "refsource": "CONFIRM",
              "tags": [
                "Patch"
              ],
              "url": "https://www.drupal.org/node/2430043"
            },
            {
              "name": "75278",
              "refsource": "BID",
              "tags": [],
              "url": "http://www.securityfocus.com/bid/75278"
            }
          ]
        }
      },
      "impact": {
        "baseMetricV2": {
          "cvssV2": {
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "SINGLE",
            "availabilityImpact": "PARTIAL",
            "baseScore": 6.0,
            "confidentialityImpact": "PARTIAL",
            "integrityImpact": "PARTIAL",
            "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:P",
            "version": "2.0"
          },
          "exploitabilityScore": 6.8,
          "impactScore": 6.4,
          "obtainAllPrivilege": false,
          "obtainOtherPrivilege": false,
          "obtainUserPrivilege": false,
          "severity": "MEDIUM",
          "userInteractionRequired": false
        }
      },
      "lastModifiedDate": "2016-11-28T19:33Z",
      "publishedDate": "2015-08-18T18:00Z"
    }
  }
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.

Action not permitted

CVE-2015-5509 (GCVE-0-2015-5509)

CNVD-2015-04064

FKIE_CVE-2015-5509

GHSA-M8CW-5CM7-7FWF

GSD-2015-5509

Tags

Sightings

Nomenclature