« Volver al listado

CVE-2015-7227

Estado: ModificadaBaja (3.5)—

The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Fieldable Panels Panes Project — Fieldable Panels Panes

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2015-7227",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-09-17T16:59:06.480",
  "references": [
    {
      "url": "https://www.drupal.org/node/2561971",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.drupal.org/node/2561981",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.drupal.org/node/2561971",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.drupal.org/node/2561981",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en el módulo Fieldable Panels Panes 7.x-1.x en versiones anteriores a 7.x-1.7 para Drupal, no verifica adecuadamente los permisos para editar las entidades Fieldable Panels Panes, lo que permite a usuarios remotos autenticados editar paneles mediante el aprovechamiento de permisos para editar paneles."
    }
  ],
  "lastModified": "2026-06-17T00:32:05.310",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.0:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7E5D01E-2496-43EF-9149-C75087E6DDB6"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.0:beta2:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66FADF9E-7ADC-40F3-B59F-D2796E033537"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.1:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB221FA2-328D-4E24-A066-46B20E233BD2"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.2:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B5540A2-745E-4E3B-87C1-8307ADFE1718"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.3:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "121C4EFD-A256-4AB3-9369-10A62C53721F"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.4:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69F46207-05A1-4A42-986E-EFBD781AF63F"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.5:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28D0A958-2670-4859-8867-0719BD26A34B"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.6:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2D8C9D1-4283-4C3F-AF5F-B8AC8BD0C952"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.x:dev:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2059605A-B3C2-4287-A298-64ABC503E4C3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}