{"api_version":"1","generated_at":"2026-07-23T04:57:45+00:00","cve":"CVE-2014-8735","urls":{"html":"https://cve.report/CVE-2014-8735","api":"https://cve.report/api/cve/CVE-2014-8735.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2014-8735","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2014-8735"},"summary":{"title":"CVE-2014-8735","description":"The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the \"administer bad behavior\" permission to obtain sensitive information by reading a log file.","state":"PUBLISHED","assigner":"mitre","published_at":"2014-11-12 16:55:07","updated_at":"2026-05-06 22:30:45"},"problem_types":["CWE-200","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"4","severity":"","vector":"AV:N/AC:L/Au:S/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"https://www.drupal.org/node/2360953","name":"https://www.drupal.org/node/2360953","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"badbehavior 6.x-2.2216 | Drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.drupal.org/node/2361611","name":"https://www.drupal.org/node/2361611","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"SA-CONTRIB-2014-100 - Bad Behavior - Information Disclosure | Drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.drupal.org/node/2360955","name":"https://www.drupal.org/node/2360955","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"title":"badbehavior 7.x-2.2216 | Drupal.org","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8735","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8735","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-1.0","cpe7":"rc1","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-1.0","cpe7":"rc2","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-1.x","cpe7":"dev","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.113","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.114","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.115","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.116","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.13","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.14","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.2","cpe7":"rc14","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.200","cpe7":"rc14","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.214","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.215","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.216","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.217","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.220","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.221","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.2210","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.2211","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.2212","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.2213","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.2214","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.2215","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.222","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.223","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.225","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.226","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.227","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"6.x-2.228","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.220","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.221","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.2210","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.2211","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.2212","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.2213","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.2214","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.2215","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.2216","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.222","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.223","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.225","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.226","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.227","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.228","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"},{"cve_year":"2014","cve_id":"8735","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"bad_behavior_project","cpe5":"bad_behavior","cpe6":"7.x-2.x","cpe7":"dev","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"drupal","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T13:26:02.540Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://www.drupal.org/node/2360955"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"https://www.drupal.org/node/2360953"},{"tags":["x_refsource_MISC","x_transferred"],"url":"https://www.drupal.org/node/2361611"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the \"administer bad behavior\" permission to obtain sensitive information by reading a log file."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2014-11-12T16:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_CONFIRM"],"url":"https://www.drupal.org/node/2360955"},{"tags":["x_refsource_CONFIRM"],"url":"https://www.drupal.org/node/2360953"},{"tags":["x_refsource_MISC"],"url":"https://www.drupal.org/node/2361611"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2014-8735","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the \"administer bad behavior\" permission to obtain sensitive information by reading a log file."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"https://www.drupal.org/node/2360955","refsource":"CONFIRM","url":"https://www.drupal.org/node/2360955"},{"name":"https://www.drupal.org/node/2360953","refsource":"CONFIRM","url":"https://www.drupal.org/node/2360953"},{"name":"https://www.drupal.org/node/2361611","refsource":"MISC","url":"https://www.drupal.org/node/2361611"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2014-8735","datePublished":"2014-11-12T16:00:00.000Z","dateReserved":"2014-11-12T00:00:00.000Z","dateUpdated":"2024-09-17T00:31:44.047Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2014-11-12 16:55:07","lastModifiedDate":"2026-05-06 22:30:45","problem_types":["CWE-200","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:S/C:P/I:N/A:N","baseScore":4,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"SINGLE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":8,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc1:*:*:*:drupal:*:*","matchCriteriaId":"1E824001-BE59-409F-9915-05B5AC0CBB0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc2:*:*:*:drupal:*:*","matchCriteriaId":"7222CC28-2CFC-4196-94CF-EA3417E77757"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"139D9E10-90F2-43A0-95F4-FC812EC417CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.1:*:*:*:*:drupal:*:*","matchCriteriaId":"2D32AC61-ACB0-4940-BCC0-28924983BCE8"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2:rc14:*:*:*:drupal:*:*","matchCriteriaId":"6C49DB39-B92A-4639-9DCF-78F2618A1E2A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.13:*:*:*:*:drupal:*:*","matchCriteriaId":"DF25749F-A37D-44C3-99F5-6CA36B6820CB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.14:*:*:*:*:drupal:*:*","matchCriteriaId":"EC283E3E-4C7C-4B3F-BD97-6DB43BF1BA8D"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.113:*:*:*:*:drupal:*:*","matchCriteriaId":"FAC6DDFF-324F-4534-A2DE-B137003B6D28"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.114:*:*:*:*:drupal:*:*","matchCriteriaId":"D96C1C52-1CA8-4647-98B2-12555B860B8C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.115:*:*:*:*:drupal:*:*","matchCriteriaId":"CA02B8E1-D46A-435F-B09A-258AA28FC0F1"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.116:*:*:*:*:drupal:*:*","matchCriteriaId":"CECB2380-9590-4A4D-A180-A1A89F80DAFC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.200:rc14:*:*:*:drupal:*:*","matchCriteriaId":"A1ACDEC3-12FE-40B5-A834-01CDB1460EBB"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.214:*:*:*:*:drupal:*:*","matchCriteriaId":"18F71579-6019-41A0-838C-6AF63D9BAA0E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.215:*:*:*:*:drupal:*:*","matchCriteriaId":"65BC4E89-19A1-40D9-8193-2912441E09CF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.216:*:*:*:*:drupal:*:*","matchCriteriaId":"13C0161E-79F2-4CFE-92F1-8E98AF4E102F"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.217:*:*:*:*:drupal:*:*","matchCriteriaId":"D896151D-C68E-4BE6-BD8C-9EA3A82B9AF4"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.220:*:*:*:*:drupal:*:*","matchCriteriaId":"971EFBD2-D8EE-4D09-AD5A-6A523AECD687"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.221:*:*:*:*:drupal:*:*","matchCriteriaId":"A0608E64-74AE-488C-A8FF-4AAACC4C75EC"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.222:*:*:*:*:drupal:*:*","matchCriteriaId":"34D76EB4-DBEA-4CAF-8378-4D23524EFCB0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.223:*:*:*:*:drupal:*:*","matchCriteriaId":"781A47E6-DDA6-4906-A3E3-45FBFC7C8C1C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.225:*:*:*:*:drupal:*:*","matchCriteriaId":"3FFC4328-CEE2-43A6-A6F6-74D8C9FB008B"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.226:*:*:*:*:drupal:*:*","matchCriteriaId":"A8613AEB-FAA7-40DB-91D5-516EEA029842"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.227:*:*:*:*:drupal:*:*","matchCriteriaId":"2A913C1C-1924-406F-A818-4B4D1316104C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.228:*:*:*:*:drupal:*:*","matchCriteriaId":"A6A780C8-0390-4A65-B54B-6160C120B04C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2210:*:*:*:*:drupal:*:*","matchCriteriaId":"14FDA12D-B6FF-4AB9-A320-CE8C49F9399E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2211:*:*:*:*:drupal:*:*","matchCriteriaId":"0F24718E-DEAA-4536-BCBB-0E4667B1F6C0"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2212:*:*:*:*:drupal:*:*","matchCriteriaId":"70FA3604-B340-4101-8EFB-C3AA8EB7F0C9"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2213:*:*:*:*:drupal:*:*","matchCriteriaId":"B4BAB184-481B-48B5-AB99-E37BD27ECE98"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2214:*:*:*:*:drupal:*:*","matchCriteriaId":"D3C5EAC7-A2D5-4474-B84F-90745434EA22"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2215:*:*:*:*:drupal:*:*","matchCriteriaId":"4620B9FD-B2B8-4C6A-8C4B-6F5644DF3D61"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.220:*:*:*:*:drupal:*:*","matchCriteriaId":"9A90902A-48C2-4911-BFB1-B7024850DF32"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.221:*:*:*:*:drupal:*:*","matchCriteriaId":"A2C81533-06C2-476D-9B39-101A824F1FCF"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.222:*:*:*:*:drupal:*:*","matchCriteriaId":"41895AEF-77C0-4BCE-89D4-5B50CEBCF2B6"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.223:*:*:*:*:drupal:*:*","matchCriteriaId":"AA0DABCD-C321-4705-ACA7-88DECE5859B3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.225:*:*:*:*:drupal:*:*","matchCriteriaId":"061FE061-E843-4D87-9484-BDEE13E4CF0A"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.226:*:*:*:*:drupal:*:*","matchCriteriaId":"91B51F29-EECB-4B45-86C9-2FB56F2F1F10"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.227:*:*:*:*:drupal:*:*","matchCriteriaId":"D8E545C5-6938-431D-BBF4-A0B1795D061C"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.228:*:*:*:*:drupal:*:*","matchCriteriaId":"DCC5C674-9736-4B19-BEAD-BED61084ECCA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2210:*:*:*:*:drupal:*:*","matchCriteriaId":"8DF93F43-6E65-4831-AAD4-0DEE8CAF8FD3"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2211:*:*:*:*:drupal:*:*","matchCriteriaId":"E31C1D7B-ABED-478D-A5A5-C2A0CEB424ED"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2212:*:*:*:*:drupal:*:*","matchCriteriaId":"4D3331D2-15AB-45A2-9091-03A9B5039592"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2213:*:*:*:*:drupal:*:*","matchCriteriaId":"3D297F6A-58EA-4CD1-98A4-AF3EFA66ED17"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2214:*:*:*:*:drupal:*:*","matchCriteriaId":"B0EC3A5F-5825-47AA-9D3F-E54EFB30A975"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2215:*:*:*:*:drupal:*:*","matchCriteriaId":"72CC34E0-5AD0-4F2C-9AF0-946E89CECB2E"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2216:*:*:*:*:drupal:*:*","matchCriteriaId":"4A229DC6-E298-4FDC-BEDC-208D1029F7CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.x:dev:*:*:*:drupal:*:*","matchCriteriaId":"D343F8A2-F69C-46DB-8A5B-F0419AD86A75"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2014","CveId":"8735","Ordinal":"1","Title":"CVE-2014-8735","CVE":"CVE-2014-8735","Year":"2014"},"notes":[{"CveYear":"2014","CveId":"8735","Ordinal":"1","NoteData":"The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the \"administer bad behavior\" permission to obtain sensitive information by reading a log file.","Type":"Description","Title":"CVE-2014-8735"},{"CveYear":"2014","CveId":"8735","Ordinal":"2","NoteData":"2014-11-12","Type":"Other","Title":"Published"}]}}}