CVE-2015-7227

The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.0:*:*:*:*:drupal:*:*
cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.0:beta2:*:*:*:drupal:*:*
cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.1:*:*:*:*:drupal:*:*
cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.2:*:*:*:*:drupal:*:*
cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.3:*:*:*:*:drupal:*:*
cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.4:*:*:*:*:drupal:*:*
cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.5:*:*:*:*:drupal:*:*
cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.6:*:*:*:*:drupal:*:*
cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.x:dev:*:*:*:drupal:*:*

History

21 Nov 2024, 02:36

Type Values Removed Values Added
References () https://www.drupal.org/node/2561971 - Patch, Vendor Advisory () https://www.drupal.org/node/2561971 - Patch, Vendor Advisory
References () https://www.drupal.org/node/2561981 - Patch () https://www.drupal.org/node/2561981 - Patch

Information

Published : 2015-09-17 16:59

Updated : 2024-11-21 02:36


NVD link : CVE-2015-7227

Mitre link : CVE-2015-7227

CVE.ORG link : CVE-2015-7227


JSON object : View

Products Affected

fieldable_panels_panes_project

  • fieldable_panels_panes
CWE
CWE-264

Permissions, Privileges, and Access Controls