The CMS Updater module 7.x-1.x before 7.x-1.3 for Drupal does not properly check access permissions, which allows remote authenticated users to access and change settings by leveraging the "access administration pages" permission.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2015-09-21T19:00:00Z
Updated: 2024-09-16T17:18:06.700Z
Reserved: 2015-09-21T00:00:00Z
Link: CVE-2015-7306
Vulnrichment
No data.
NVD
Status : Analyzed
Published: 2015-09-21T19:59:10.230
Modified: 2015-09-23T03:03:58.880
Link: CVE-2015-7306
Redhat
No data.