CVE-2015-7306
4.9
Vector
AV:N/AC:M/Au:S/C:N/I:P/A:P
Exploitability: 6.8 / Impact: 4.9
Source: NVD
Description
The CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal does not properly check access permissions, which allows remote authenticated users to access and change settings by leveraging the "access administration pages" permission.
Affected (3)
Products: Drupaldise: Cms Updater
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Version 7.x-1.0 |
References (4)
Timeline
No history available yet.