2023-04-24 12:24:31 +02:00
{
"id" : "CVE-2015-7875" ,
"sourceIdentifier" : "cve@mitre.org" ,
"published" : "2017-08-07T17:29:00.440" ,
2024-12-08 03:06:42 +00:00
"lastModified" : "2024-11-21T02:37:34.877" ,
2023-04-24 12:24:31 +02:00
"vulnStatus" : "Modified" ,
2024-07-14 02:06:08 +00:00
"cveTags" : [ ] ,
2023-04-24 12:24:31 +02:00
"descriptions" : [
{
"lang" : "en" ,
"value" : "ctools 6.x-1.x before 6.x-1.14 and 7.x-1.x before 7.x-1.8 in Drupal does not verify the \"edit\" permission for the \"content type\" plugins that are used on Panels and similar systems to place content and functionality on a page."
} ,
{
"lang" : "es" ,
"value" : "ctools 6.x-1.x en versiones anteriores a la 6.x-1.14 y 7.x-1.x en versiones anteriores a la 7.x-1.8 en Drupal no verifica el permiso \"edit\" para los plugins \"content type\" que se utilizan en Panels y sistemas similares para colocar contenido y funcionalidades en una p\u00e1gina."
}
] ,
"metrics" : {
"cvssMetricV30" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "3.0" ,
"vectorString" : "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 7.5 ,
"baseSeverity" : "HIGH" ,
2023-04-24 12:24:31 +02:00
"attackVector" : "NETWORK" ,
"attackComplexity" : "LOW" ,
"privilegesRequired" : "NONE" ,
"userInteraction" : "NONE" ,
"scope" : "UNCHANGED" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "HIGH" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"exploitabilityScore" : 3.9 ,
"impactScore" : 3.6
}
] ,
"cvssMetricV2" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"cvssData" : {
"version" : "2.0" ,
"vectorString" : "AV:N/AC:L/Au:N/C:N/I:P/A:N" ,
2024-12-08 03:06:42 +00:00
"baseScore" : 5.0 ,
2023-04-24 12:24:31 +02:00
"accessVector" : "NETWORK" ,
"accessComplexity" : "LOW" ,
"authentication" : "NONE" ,
"confidentialityImpact" : "NONE" ,
"integrityImpact" : "PARTIAL" ,
2024-12-08 03:06:42 +00:00
"availabilityImpact" : "NONE"
2023-04-24 12:24:31 +02:00
} ,
"baseSeverity" : "MEDIUM" ,
"exploitabilityScore" : 10.0 ,
"impactScore" : 2.9 ,
"acInsufInfo" : false ,
"obtainAllPrivilege" : false ,
"obtainUserPrivilege" : false ,
"obtainOtherPrivilege" : false ,
"userInteractionRequired" : false
}
]
} ,
"weaknesses" : [
{
"source" : "nvd@nist.gov" ,
"type" : "Primary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-264"
}
]
}
] ,
"configurations" : [
{
"nodes" : [
{
"operator" : "OR" ,
"negate" : false ,
"cpeMatch" : [
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "707AD226-1D2E-46B5-9626-FDD99A5F7EEC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:alpha1:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "C5B9EF92-78B1-44DE-83C5-068199E0EE44"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:alpha2:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "2C05A815-09CB-4201-8345-89AE530D9925"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:alpha3:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "492C9CF3-A6D8-4BC2-B9CE-6575BEF6C490"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta1:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "3C89BFC4-CBFE-40D0-AF4B-D18750F8F83E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta2:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "7158E609-D504-4938-9651-2A782D319838"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta3:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "6CF31BF7-3BD2-4EA1-BEA1-C73E5AAD6779"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:beta4:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "C9EFC7E5-F1D7-4EB3-B185-A7CFDA961261"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.0:rc1:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "CA34F407-47D1-4F39-B26A-84FCD05EE6ED"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.1:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "0B3D4721-7320-423F-8E76-07E4D2E7F6DD"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.2:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "58C0D287-58A4-4C8D-9042-29042FA412F7"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.3:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "DE51E707-6ABD-431C-B3B7-89D514BFFC84"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.4:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "DDC0B3F6-DF07-4E0A-8F37-3261AD144E6A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.5:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "599655AB-52D9-47E8-B388-CFB4F75DB8D1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.6:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "A7450146-5D5D-4681-99F1-2952AB0855B4"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.7:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "43E0AAD2-2937-4389-BF5E-A63A33723F1A"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.8:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "82843F45-7863-4D43-AAC6-E807356D16A5"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.9:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "754DAD0C-555C-41E8-8384-CD5A21442992"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.11:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "77BC1FBB-7D2A-4651-B9AA-E34DBBAA8B59"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.12:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "081EC9A4-A303-41B7-85AD-2B63D19F6D3D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.13:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "EC29EF2B-3E16-4808-89FA-DE57DBCEAEBA"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:6.x-1.x:dev:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "4437675C-D86D-4903-9641-3AA3D28BD9F2"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.0:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "5FA4E46D-F7D9-448D-B971-D8EE786EB3AC"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.0:alpha1:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "03BCA1E8-4733-4653-BA48-EEB373DFE218"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.0:alpha2:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "5A481BBC-B7DE-4AB7-A582-85E02ADFCAEE"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.0:alpha3:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "00DBF5CE-D194-4446-80C8-C332AD02E50E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.0:alpha4:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "16B9EAD7-E9A4-451D-9A23-E9372C239322"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.0:beta1:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "FAD3327C-8619-4A96-B9C9-FFB4F374492C"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.0:rc1:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "62E855A8-381E-471B-AD3F-811DA35DAAE3"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.0:rc2:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "F5055F95-FEC4-4C14-8DD6-AD535FBCD401"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.1:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "EFA33F20-D932-42F3-84B0-9E55645D64D6"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.2:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "F56B3706-6AF5-42C9-A565-882AE03ADA9D"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.3:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "7683107F-23E1-4220-91FA-CFCDD2129AE1"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.4:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "698747A0-461D-409B-B9DE-9059CCF81AA8"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.5:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "05D4A651-2FFE-42D1-8412-4C3C4098995F"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.6:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "FF5CE8CA-69E1-465A-9F16-C96FB1E0F564"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.6:rc1:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "B6B28B89-76C3-4407-84EF-48CBF6FBD783"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.7:*:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "67F3EE9A-42F2-47EB-8E1F-666AFDFC3A6E"
} ,
{
"vulnerable" : true ,
"criteria" : "cpe:2.3:a:chaos_tool_suite_project:ctools:7.x-1.x:dev:*:*:*:drupal:*:*" ,
"matchCriteriaId" : "6792E424-EA0A-4341-91E6-9C14446B6FCF"
}
]
}
]
}
] ,
"references" : [
{
"url" : "http://www.openwall.com/lists/oss-security/2015/10/21/2" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Mailing List" ,
"Third Party Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/76441" ,
"source" : "cve@mitre.org"
} ,
{
"url" : "https://www.drupal.org/node/2554145" ,
"source" : "cve@mitre.org" ,
"tags" : [
"Vendor Advisory"
]
2024-12-08 03:06:42 +00:00
} ,
{
"url" : "http://www.openwall.com/lists/oss-security/2015/10/21/2" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Mailing List" ,
"Third Party Advisory"
]
} ,
{
"url" : "http://www.securityfocus.com/bid/76441" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108"
} ,
{
"url" : "https://www.drupal.org/node/2554145" ,
"source" : "af854a3a-2127-422b-91ae-364da2661108" ,
"tags" : [
"Vendor Advisory"
]
2023-04-24 12:24:31 +02:00
}
]
}
