CVE-2015-3404 | BDVDB-2026-69201 Detail

Description#

The Certify module before 6.x-2.3 for Drupal does not properly perform node access checks, which allows remote authenticated users to bypass intended access restrictions and obtain sensitive PDF certificate information via vectors related to "showing (and creating) the PDF certificates."

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.drupal.org/node/2407081
https://www.drupal.org/node/2415947
http://www.openwall.com/lists/oss-security/2015/01/29/6
http://www.openwall.com/lists/oss-security/2015/04/21/8
http://www.securityfocus.com/bid/74282

Exploit#

No public exploit known

History#

Version 12015-04-22Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.