CVE-2015-7227 — LOW (3.5) — White Hats Nepal

Vulnerability Description

The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels.

CVSS Score

3.5

LOW

AV:N/AC:M/Au:S/C:N/I:P/A:N

Confidentiality

NONE

Integrity

PARTIAL

Availability

NONE

Affected Products

Vendor	Product	Versions
Fieldable Panels Panes Project	Fieldable Panels Panes	7.x-1.0

Related Weaknesses (CWE)

CWE-264

References

https://www.drupal.org/node/2561971PatchVendor Advisory
https://www.drupal.org/node/2561981Patch
https://www.drupal.org/node/2561971PatchVendor Advisory
https://www.drupal.org/node/2561981Patch

FAQ

What is CVE-2015-7227?

CVE-2015-7227 is a vulnerability with a CVSS score of 3.5 (LOW). The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes b...

How severe is CVE-2015-7227?

CVE-2015-7227 has been rated LOW with a CVSS base score of 3.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2015-7227?

Check the references section above for vendor advisories and patch information. Affected products include: Fieldable Panels Panes Project Fieldable Panels Panes.