CVE-2016-6212
Publication date 9 September 2016
Last updated 24 July 2024
Ubuntu priority
Cvss 3 Severity Score
The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors.
Status
Package | Ubuntu Release | Status |
---|---|---|
drupal7 | 16.04 LTS xenial |
Not affected
|
14.04 LTS trusty |
Not affected
|
|
drupal8 | 16.04 LTS xenial | Not in release |
14.04 LTS trusty | Not in release | |
Severity score breakdown
Parameter | Value |
---|---|
Base score | 5.3 · Medium |
Attack vector | Network |
Attack complexity | Low |
Privileges required | None |
User interaction | None |
Scope | Unchanged |
Confidentiality | Low |
Integrity impact | None |
Availability impact | None |
Vector | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N |