CVE-2015-2559 | BDVDB-2026-68609 Detail

Description#

Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a crafted password reset URL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.debian.org/security/2015/dsa-3200
http://www.securityfocus.com/bid/73219
https://www.drupal.org/SA-CORE-2015-001

Exploit#

No public exploit known

History#

Version 12015-03-25Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.