Drupal Core Information Disclosure Vulnerability
BID:66977
Info
Drupal Core Information Disclosure Vulnerability
| Bugtraq ID: | 66977 |
| Class: | Design Error |
| CVE: |
CVE-2014-2983 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 16 2014 12:00AM |
| Updated: | Apr 13 2015 10:25PM |
| Credit: | Daniel F. Kudwien, Rodionov Igor, Ryan Szrama, Roman Zimmermann and znerol |
| Vulnerable: |
Drupal Drupal 7.9 Drupal Drupal 7.8 Drupal Drupal 7.7 Drupal Drupal 7.6 Drupal Drupal 7.5 Drupal Drupal 7.4 Drupal Drupal 7.3 Drupal Drupal 7.26 Drupal Drupal 7.24 Drupal Drupal 7.23 Drupal Drupal 7.22 Drupal Drupal 7.21 Drupal Drupal 7.20 Drupal Drupal 7.2 Drupal Drupal 7.19 Drupal Drupal 7.18 Drupal Drupal 7.17 Drupal Drupal 7.16 Drupal Drupal 7.15 Drupal Drupal 7.14 Drupal Drupal 7.13 Drupal Drupal 7.12 Drupal Drupal 7.11 Drupal Drupal 7.10 Drupal Drupal 7.1 Drupal Drupal 6.9 Drupal Drupal 6.8 Drupal Drupal 6.7 Drupal Drupal 6.6 Drupal Drupal 6.5 Drupal Drupal 6.4 Drupal Drupal 6.30 Drupal Drupal 6.3 Drupal Drupal 6.29 Drupal Drupal 6.28 Drupal Drupal 6.27 Drupal Drupal 6.26 Drupal Drupal 6.25 Drupal Drupal 6.24 Drupal Drupal 6.23 Drupal Drupal 6.22 Drupal Drupal 6.21 Drupal Drupal 6.20 Drupal Drupal 6.2 Drupal Drupal 6.19 Drupal Drupal 6.18 Drupal Drupal 6.17 Drupal Drupal 6.16 Drupal Drupal 6.15 Drupal Drupal 6.14 Drupal Drupal 6.13 Drupal Drupal 6.12 Drupal Drupal 6.11 Drupal Drupal 6.10 Drupal Drupal 6.1 Drupal Drupal 6.0 Rc4 Drupal Drupal 6.0 Rc3 Drupal Drupal 6.0 Rc2 Drupal Drupal 6.0 Rc1 Drupal Drupal 6.0 Dev Drupal Drupal 6.0 Beta4 Drupal Drupal 6.0 Beta3 Drupal Drupal 6.0 Beta2 Drupal Drupal 6.0 Beta1 Drupal Drupal 6.0 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: |
Drupal Drupal 7.27 Drupal Drupal 6.31 |
Discussion
Drupal Core Information Disclosure Vulnerability
Drupal is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
Drupal versions 7.x through 7.27 and 6.x through 6.31 are vulnerable.
Drupal is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
Drupal versions 7.x through 7.27 and 6.x through 6.31 are vulnerable.
Exploit / POC
Drupal Core Information Disclosure Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
References
Drupal Core Information Disclosure Vulnerability
References:
References:
- Drupal Homepage (Drupal)
- SA-CORE-2014-002 - Drupal core - Information Disclosure (Drupal)