Drupal CVE-2015-3231 Information Disclosure Vulnerability
BID:75286
Info
Drupal CVE-2015-3231 Information Disclosure Vulnerability
| Bugtraq ID: | 75286 |
| Class: | Design Error |
| CVE: |
CVE-2015-3231 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 17 2015 12:00AM |
| Updated: | Jul 15 2015 12:38AM |
| Credit: | Nathaniel Catchpole of the Drupal Security Team |
| Vulnerable: |
Drupal Drupal 7.6 Drupal Drupal 7.5 Drupal Drupal 7.4 Drupal Drupal 7.3 Drupal Drupal 7.2 Drupal Drupal 7.14 Drupal Drupal 7.13 Drupal Drupal 7.12 Drupal Drupal 7.11 Drupal Drupal 7.10 Drupal Drupal 7.1 Drupal Drupal 7.0 Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64 |
| Not Vulnerable: | |
Discussion
Drupal CVE-2015-3231 Information Disclosure Vulnerability
Drupal is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
Drupal 7 versions prior to 7.38 are vulnerable.
Drupal is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
Drupal 7 versions prior to 7.38 are vulnerable.
Exploit / POC
Drupal CVE-2015-3231 Information Disclosure Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.
Solution / Fix
Drupal CVE-2015-3231 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.