CVE-2014-9504

概要

参考情報

• openwall.com/lists/oss-security/2015/01/04/6 · Issue Tracking
• exchange.xforce.ibmcloud.com/vulnerabilities/99657 · Third Party Advisory
• drupal.org/node/2394979 · Mitigation
• drupal.org/node/2395045 · Patch

open atrium のその他の脆弱性

• CVE-2014-9503中 6.5The Discussions sub module in the Open Atrium module 7.x-2.x before 7.x-2.26 for Drupal allows remote authenticated users with "access conte…
• CVE-2014-9502高 8.8Multiple cross-site request forgery (CSRF) vulnerabilities in unspecified sub modules in the Open Atrium module 7.x-2.x before 7.x-2.26 for …
• CVE-2014-8736中 5.0The Open Atrium Core module for Drupal before 7.x-2.22 allows remote attackers to bypass access restrictions and read file attachments that …