CVE-2015-3373 | BDVDB-2026-69177 Detail

Description#

The Amazon AWS module before 7.x-1.3 for Drupal uses the base URL and AWS access key to generate the access token, which makes it easier for remote attackers to guess the token value and create backups via a crafted URL.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://cgit.drupalcode.org/aws_amazon/commit/?id=9377a26
https://www.drupal.org/node/2415457
http://www.securityfocus.com/bid/74277
https://www.drupal.org/node/2415873
http://www.openwall.com/lists/oss-security/2015/01/29/6

Exploit#

No public exploit known

History#

Version 12015-04-21Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.