« Back to list

CVE-2015-7227

Status: ModifiedLow (3.5)—

The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Fieldable Panels Panes Project — Fieldable Panels Panes

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2015-7227",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 3.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "LOW",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2015-09-17T16:59:06.480",
  "references": [
    {
      "url": "https://www.drupal.org/node/2561971",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.drupal.org/node/2561981",
      "tags": [
        "Patch"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://www.drupal.org/node/2561971",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://www.drupal.org/node/2561981",
      "tags": [
        "Patch"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Fieldable Panels Panes module 7.x-1.x before 7.x-1.7 for Drupal does not properly check permissions to edit Fieldable Panels Panes entities, which allows remote authenticated users to edit panes by leveraging permissions to edit panels."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad en el módulo Fieldable Panels Panes 7.x-1.x en versiones anteriores a 7.x-1.7 para Drupal, no verifica adecuadamente los permisos para editar las entidades Fieldable Panels Panes, lo que permite a usuarios remotos autenticados editar paneles mediante el aprovechamiento de permisos para editar paneles."
    }
  ],
  "lastModified": "2026-06-17T00:32:05.310",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.0:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A7E5D01E-2496-43EF-9149-C75087E6DDB6"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.0:beta2:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66FADF9E-7ADC-40F3-B59F-D2796E033537"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.1:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FB221FA2-328D-4E24-A066-46B20E233BD2"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.2:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2B5540A2-745E-4E3B-87C1-8307ADFE1718"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.3:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "121C4EFD-A256-4AB3-9369-10A62C53721F"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.4:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69F46207-05A1-4A42-986E-EFBD781AF63F"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.5:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "28D0A958-2670-4859-8867-0719BD26A34B"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.6:*:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D2D8C9D1-4283-4C3F-AF5F-B8AC8BD0C952"
            },
            {
              "criteria": "cpe:2.3:a:fieldable_panels_panes_project:fieldable_panels_panes:7.x-1.x:dev:*:*:*:drupal:*:*",
              "vulnerable": true,
              "matchCriteriaId": "2059605A-B3C2-4287-A298-64ABC503E4C3"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}