« Volver al listado

CVE-2014-8734

Estado: ModificadaBaja (3.5)—

The Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote authenticated users with the "access administration pages" permission to change module settings via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Drupal — Organic Groups Menu

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2014-8734",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-11-12T16:55:07.793",
  "references": [
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98445",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.drupal.org/node/2365259",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.drupal.org/node/2365685",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/98445",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.drupal.org/node/2365259",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.drupal.org/node/2365685",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Organic Groups Menu (aka OG Menu) module before 7.x-2.2 for Drupal allows remote authenticated users with the \"access administration pages\" permission to change module settings via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "El módulo Organic Groups Menu (también conocido como OG Menu) anterior a 7.x-2.2 para Drupal permite a usuarios remotos autenticados con el permiso 'acceder a las páginas de administración' cambiar las configuraciones de módulos a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:17:14.500",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:drupal:organic_groups_menu:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B9AA0638-1497-470A-A19C-2CFF08E66848",
              "versionEndIncluding": "7.x-2.1"
            },
            {
              "criteria": "cpe:2.3:a:drupal:organic_groups_menu:7.x-2.0:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D43FDC1E-1140-4E02-A9F1-E60C09EEBDBC"
            },
            {
              "criteria": "cpe:2.3:a:drupal:organic_groups_menu:7.x-2.x-dev:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "459AE340-16A7-4D20-ACDB-21EC8D3343D2"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}