CVE-2015-4345

Published: Jun 15, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The RESTWS Basic Auth submodule in the RESTful Web Services module 7.x-1.x before 7.x-1.5 and 7.x-2.x before 7.x-2.3 for Drupal caches pages for authenticated requests, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected (8)

Products: Restful Web Services Project: Restful Web Services

Restful Web Services Project

1 product

Restful Web Services

Configuration A

8 vulnerable

Vulnerable Software	Affected Versions
Restful Web Services Project Restful Web Services	Version 7.x-1.0
Restful Web Services Project Restful Web Services	Version 7.x-1.1
Restful Web Services Project Restful Web Services	Version 7.x-1.2
Restful Web Services Project Restful Web Services	Version 7.x-1.3
Restful Web Services Project Restful Web Services	Version 7.x-1.4
Restful Web Services Project Restful Web Services	Version 7.x-2.0
Restful Web Services Project Restful Web Services	Version 7.x-2.1
Restful Web Services Project Restful Web Services	Version 7.x-2.2