CVE-2015-4375 | BDVDB-2026-69945 Detail

Description#

The Chaos tool suite (ctools) module 7.x-1.x before 7.x-1.7 for Drupal allows remote attackers to obtain sensitive node titles via (1) an autocomplete search on custom entities without an access query tag or (2) leveraging knowledge of the ID of an entity.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.openwall.com/lists/oss-security/2015/03/22/35
http://www.openwall.com/lists/oss-security/2015/04/25/6
https://www.drupal.org/node/2454909
https://www.drupal.org/node/2454883

Exploit#

No public exploit known

History#

Version 12015-06-15Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.