Drupal Views Module DRUPAL-SA-CONTRIB-2017-068 Access Bypass Vulnerability

Bugtraq ID:	100371
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 16 2017 12:00AM
Updated:	Aug 16 2017 12:00AM
Credit:	Maxim Podorov
Vulnerable:	Drupal Views 7.x-3.9 Drupal Views 7.x-3.8 Drupal Views 7.x-3.7 Drupal Views 7.x-3.6 Drupal Views 7.x-3.5 Drupal Views 7.x-3.4 Drupal Views 7.x-3.3 Drupal Views 7.x-3.2 Drupal Views 7.x-3.16 Drupal Views 7.x-3.14 Drupal Views 7.x-3.13 Drupal Views 7.x-3.12 Drupal Views 7.x-3.11 Drupal Views 7.x-3.10 Drupal Views 7.x-3.1 Drupal Views 7.x-3.0
Not Vulnerable:	Drupal Views 7.x-3.17

Drupal Views Module DRUPAL-SA-CONTRIB-2017-068 Access Bypass Vulnerability

The Views module for Drupal is prone to an access-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions.

Views versions prior to 7.x-3.17 are vulnerable.

Drupal Views Module DRUPAL-SA-CONTRIB-2017-068 Access Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Drupal Views Module DRUPAL-SA-CONTRIB-2017-068 Access Bypass Vulnerability

References:

• Drupal Homepage (Drupal)
  
• Drupal Views Module Homepage (Drupal)
  
• Views - Moderately Critical - Access Bypass - DRUPAL-SA-CONTRIB-2017-068 (Drupal)