CVE-2015-5490
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The _views_fetch_data method in includes/cache.inc in the Views module 7.x-3.5 through 7.x-3.10 for Drupal does not rebuild the full cache if the static cache is not empty, which allows remote attackers to bypass intended filters and obtain access to hidden content via unspecified vectors.
Vulnerabilidad en el método _views_fetch_data en includes/cache.inc en el módulo Views 7.x-3.5 hasta 7.x-3.10 para Drupal, no reconstruye la caché completa si la caché estática no está vacía, lo que permite a atacantes remotos eludir los filtros previstos y obtener acceso a contenido oculto a través de vectores no especificados.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2015-07-10 CVE Reserved
- 2015-08-18 CVE Published
- 2023-03-07 EPSS Updated
- 2024-08-06 CVE Updated
- 2024-08-06 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-200: Exposure of Sensitive Information to an Unauthorized Actor
CAPEC
References (6)
| URL | Tag | Source |
|---|---|---|
| http://cgit.drupalcode.org/views/commit/?id=cef693b | X_refsource_confirm | |
| http://www.openwall.com/lists/oss-security/2015/07/04/4 | Mailing List |
|
| http://www.securityfocus.com/bid/74462 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| https://www.drupal.org/node/2475669 | 2024-08-06 |
| URL | Date | SRC |
|---|---|---|
| https://www.drupal.org/node/2480259 | 2016-11-28 | |
| https://www.drupal.org/node/2480327 | 2016-11-28 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Views Project Search vendor "Views Project" | Views Search vendor "Views Project" for product "Views" | 7.x-3.5 Search vendor "Views Project" for product "Views" and version "7.x-3.5" | drupal |
Affected
| ||||||
| Views Project Search vendor "Views Project" | Views Search vendor "Views Project" for product "Views" | 7.x-3.6 Search vendor "Views Project" for product "Views" and version "7.x-3.6" | drupal |
Affected
| ||||||
| Views Project Search vendor "Views Project" | Views Search vendor "Views Project" for product "Views" | 7.x-3.7 Search vendor "Views Project" for product "Views" and version "7.x-3.7" | drupal |
Affected
| ||||||
| Views Project Search vendor "Views Project" | Views Search vendor "Views Project" for product "Views" | 7.x-3.8 Search vendor "Views Project" for product "Views" and version "7.x-3.8" | drupal |
Affected
| ||||||
| Views Project Search vendor "Views Project" | Views Search vendor "Views Project" for product "Views" | 7.x-3.10 Search vendor "Views Project" for product "Views" and version "7.x-3.10" | drupal |
Affected
| ||||||