CVE-2015-4394

Published: Jun 15, 2015Modified: May 6, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Services module 7.x-3.x before 7.x-3.12 for Drupal allows remote attackers to bypass the field_access restriction and obtain sensitive private field information via unspecified vectors.

Affected (10)

Products: Services Project: Services

Services Project

1 product

Services

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Services Project Services	Version 7.x-3.0
Services Project Services	Version 7.x-3.10
Services Project Services	Version 7.x-3.11
Services Project Services	Version 7.x-3.1
Services Project Services	Version 7.x-3.2
Services Project Services	Version 7.x-3.3
Services Project Services	Version 7.x-3.4
Services Project Services	Version 7.x-3.5
Services Project Services	Version 7.x-3.6
Services Project Services	Version 7.x-3.7