CVE-2014-8735 (GCVE-0-2014-8735)
Vulnerability from cvelistv5 – Published: 2014-11-12 16:00 – Updated: 2024-09-17 00:31
VLAI
EPSS
VEX
Summary
The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" permission to obtain sensitive information by reading a log file.
Severity
No CVSS data available.
CWE
- n/a
Assigner
References
3 references
| URL | Tags |
|---|---|
| https://www.drupal.org/node/2360955 | x_refsource_CONFIRM |
| https://www.drupal.org/node/2360953 | x_refsource_CONFIRM |
| https://www.drupal.org/node/2361611 | x_refsource_MISC |
{
"containers": {
"adp": [
{
"providerMetadata": {
"dateUpdated": "2024-08-06T13:26:02.540Z",
"orgId": "af854a3a-2127-422b-91ae-364da2661108",
"shortName": "CVE"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.drupal.org/node/2360955"
},
{
"tags": [
"x_refsource_CONFIRM",
"x_transferred"
],
"url": "https://www.drupal.org/node/2360953"
},
{
"tags": [
"x_refsource_MISC",
"x_transferred"
],
"url": "https://www.drupal.org/node/2361611"
}
],
"title": "CVE Program Container"
}
],
"cna": {
"affected": [
{
"product": "n/a",
"vendor": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the \"administer bad behavior\" permission to obtain sensitive information by reading a log file."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "n/a",
"lang": "en",
"type": "text"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2014-11-12T16:00:00.000Z",
"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"shortName": "mitre"
},
"references": [
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.drupal.org/node/2360955"
},
{
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://www.drupal.org/node/2360953"
},
{
"tags": [
"x_refsource_MISC"
],
"url": "https://www.drupal.org/node/2361611"
}
],
"x_legacyV4Record": {
"CVE_data_meta": {
"ASSIGNER": "cve@mitre.org",
"ID": "CVE-2014-8735",
"STATE": "PUBLIC"
},
"affects": {
"vendor": {
"vendor_data": [
{
"product": {
"product_data": [
{
"product_name": "n/a",
"version": {
"version_data": [
{
"version_value": "n/a"
}
]
}
}
]
},
"vendor_name": "n/a"
}
]
}
},
"data_format": "MITRE",
"data_type": "CVE",
"data_version": "4.0",
"description": {
"description_data": [
{
"lang": "eng",
"value": "The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the \"administer bad behavior\" permission to obtain sensitive information by reading a log file."
}
]
},
"problemtype": {
"problemtype_data": [
{
"description": [
{
"lang": "eng",
"value": "n/a"
}
]
}
]
},
"references": {
"reference_data": [
{
"name": "https://www.drupal.org/node/2360955",
"refsource": "CONFIRM",
"url": "https://www.drupal.org/node/2360955"
},
{
"name": "https://www.drupal.org/node/2360953",
"refsource": "CONFIRM",
"url": "https://www.drupal.org/node/2360953"
},
{
"name": "https://www.drupal.org/node/2361611",
"refsource": "MISC",
"url": "https://www.drupal.org/node/2361611"
}
]
}
}
}
},
"cveMetadata": {
"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
"assignerShortName": "mitre",
"cveId": "CVE-2014-8735",
"datePublished": "2014-11-12T16:00:00.000Z",
"dateReserved": "2014-11-12T00:00:00.000Z",
"dateUpdated": "2024-09-17T00:31:44.047Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.1",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2014-8735",
"date": "2026-07-29",
"epss": "0.01218",
"percentile": "0.65524"
},
"fkie_nvd": {
"configurations": "[{\"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc1:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"1E824001-BE59-409F-9915-05B5AC0CBB0A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc2:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"7222CC28-2CFC-4196-94CF-EA3417E77757\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.x:dev:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"139D9E10-90F2-43A0-95F4-FC812EC417CB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.1:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"2D32AC61-ACB0-4940-BCC0-28924983BCE8\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2:rc14:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"6C49DB39-B92A-4639-9DCF-78F2618A1E2A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.13:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"DF25749F-A37D-44C3-99F5-6CA36B6820CB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.14:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"EC283E3E-4C7C-4B3F-BD97-6DB43BF1BA8D\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.113:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"FAC6DDFF-324F-4534-A2DE-B137003B6D28\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.114:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"D96C1C52-1CA8-4647-98B2-12555B860B8C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.115:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"CA02B8E1-D46A-435F-B09A-258AA28FC0F1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.116:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"CECB2380-9590-4A4D-A180-A1A89F80DAFC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.200:rc14:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"A1ACDEC3-12FE-40B5-A834-01CDB1460EBB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.214:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"18F71579-6019-41A0-838C-6AF63D9BAA0E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.215:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"65BC4E89-19A1-40D9-8193-2912441E09CF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.216:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"13C0161E-79F2-4CFE-92F1-8E98AF4E102F\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.217:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"D896151D-C68E-4BE6-BD8C-9EA3A82B9AF4\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.220:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"971EFBD2-D8EE-4D09-AD5A-6A523AECD687\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.221:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"A0608E64-74AE-488C-A8FF-4AAACC4C75EC\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.222:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"34D76EB4-DBEA-4CAF-8378-4D23524EFCB0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.223:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"781A47E6-DDA6-4906-A3E3-45FBFC7C8C1C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.225:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"3FFC4328-CEE2-43A6-A6F6-74D8C9FB008B\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.226:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"A8613AEB-FAA7-40DB-91D5-516EEA029842\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.227:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"2A913C1C-1924-406F-A818-4B4D1316104C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.228:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"A6A780C8-0390-4A65-B54B-6160C120B04C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2210:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"14FDA12D-B6FF-4AB9-A320-CE8C49F9399E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2211:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"0F24718E-DEAA-4536-BCBB-0E4667B1F6C0\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2212:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"70FA3604-B340-4101-8EFB-C3AA8EB7F0C9\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2213:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"B4BAB184-481B-48B5-AB99-E37BD27ECE98\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2214:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"D3C5EAC7-A2D5-4474-B84F-90745434EA22\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2215:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"4620B9FD-B2B8-4C6A-8C4B-6F5644DF3D61\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.220:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"9A90902A-48C2-4911-BFB1-B7024850DF32\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.221:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"A2C81533-06C2-476D-9B39-101A824F1FCF\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.222:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"41895AEF-77C0-4BCE-89D4-5B50CEBCF2B6\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.223:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"AA0DABCD-C321-4705-ACA7-88DECE5859B3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.225:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"061FE061-E843-4D87-9484-BDEE13E4CF0A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.226:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"91B51F29-EECB-4B45-86C9-2FB56F2F1F10\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.227:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"D8E545C5-6938-431D-BBF4-A0B1795D061C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.228:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"DCC5C674-9736-4B19-BEAD-BED61084ECCA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2210:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"8DF93F43-6E65-4831-AAD4-0DEE8CAF8FD3\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2211:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"E31C1D7B-ABED-478D-A5A5-C2A0CEB424ED\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2212:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"4D3331D2-15AB-45A2-9091-03A9B5039592\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2213:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"3D297F6A-58EA-4CD1-98A4-AF3EFA66ED17\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2214:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"B0EC3A5F-5825-47AA-9D3F-E54EFB30A975\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2215:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"72CC34E0-5AD0-4F2C-9AF0-946E89CECB2E\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2216:*:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"4A229DC6-E298-4FDC-BEDC-208D1029F7CA\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.x:dev:*:*:*:drupal:*:*\", \"matchCriteriaId\": \"D343F8A2-F69C-46DB-8A5B-F0419AD86A75\"}]}]}]",
"descriptions": "[{\"lang\": \"en\", \"value\": \"The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the \\\"administer bad behavior\\\" permission to obtain sensitive information by reading a log file.\"}, {\"lang\": \"es\", \"value\": \"El m\\u00f3dulo Bad Behavior 6.x-2.x anterior a 6.x-2.2216 y 7.x-2.x anterior a 7.x-2.2216 para Drupal registra nombres de usuarios y contrase\\u00f1as, lo que permite a usuarios remotos autenticados con el permiso \u0027administrar comportamiento malo (bad behavior)\u0027 obtener informaci\\u00f3n sensible mediante la lectura de un fichero del registro.\"}]",
"id": "CVE-2014-8735",
"lastModified": "2024-11-21T02:19:40.073",
"metrics": "{\"cvssMetricV2\": [{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"2.0\", \"vectorString\": \"AV:N/AC:L/Au:S/C:P/I:N/A:N\", \"baseScore\": 4.0, \"accessVector\": \"NETWORK\", \"accessComplexity\": \"LOW\", \"authentication\": \"SINGLE\", \"confidentialityImpact\": \"PARTIAL\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"baseSeverity\": \"MEDIUM\", \"exploitabilityScore\": 8.0, \"impactScore\": 2.9, \"acInsufInfo\": false, \"obtainAllPrivilege\": false, \"obtainUserPrivilege\": false, \"obtainOtherPrivilege\": false, \"userInteractionRequired\": false}]}",
"published": "2014-11-12T16:55:07.857",
"references": "[{\"url\": \"https://www.drupal.org/node/2360953\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.drupal.org/node/2360955\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.drupal.org/node/2361611\", \"source\": \"cve@mitre.org\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.drupal.org/node/2360953\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.drupal.org/node/2360955\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}, {\"url\": \"https://www.drupal.org/node/2361611\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Patch\", \"Third Party Advisory\"]}]",
"sourceIdentifier": "cve@mitre.org",
"vulnStatus": "Modified",
"weaknesses": "[{\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-200\"}]}]"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2014-8735\",\"sourceIdentifier\":\"cve@mitre.org\",\"published\":\"2014-11-12T16:55:07.857\",\"lastModified\":\"2026-05-06T22:30:45.220\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the \\\"administer bad behavior\\\" permission to obtain sensitive information by reading a log file.\"},{\"lang\":\"es\",\"value\":\"El m\u00f3dulo Bad Behavior 6.x-2.x anterior a 6.x-2.2216 y 7.x-2.x anterior a 7.x-2.2216 para Drupal registra nombres de usuarios y contrase\u00f1as, lo que permite a usuarios remotos autenticados con el permiso \u0027administrar comportamiento malo (bad behavior)\u0027 obtener informaci\u00f3n sensible mediante la lectura de un fichero del registro.\"}],\"metrics\":{\"cvssMetricV2\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"2.0\",\"vectorString\":\"AV:N/AC:L/Au:S/C:P/I:N/A:N\",\"baseScore\":4.0,\"accessVector\":\"NETWORK\",\"accessComplexity\":\"LOW\",\"authentication\":\"SINGLE\",\"confidentialityImpact\":\"PARTIAL\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"baseSeverity\":\"MEDIUM\",\"exploitabilityScore\":8.0,\"impactScore\":2.9,\"acInsufInfo\":false,\"obtainAllPrivilege\":false,\"obtainUserPrivilege\":false,\"obtainOtherPrivilege\":false,\"userInteractionRequired\":false}]},\"weaknesses\":[{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-200\"}]}],\"configurations\":[{\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc1:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"1E824001-BE59-409F-9915-05B5AC0CBB0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc2:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"7222CC28-2CFC-4196-94CF-EA3417E77757\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.x:dev:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"139D9E10-90F2-43A0-95F4-FC812EC417CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.1:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"2D32AC61-ACB0-4940-BCC0-28924983BCE8\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2:rc14:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"6C49DB39-B92A-4639-9DCF-78F2618A1E2A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.13:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"DF25749F-A37D-44C3-99F5-6CA36B6820CB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.14:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"EC283E3E-4C7C-4B3F-BD97-6DB43BF1BA8D\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.113:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"FAC6DDFF-324F-4534-A2DE-B137003B6D28\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.114:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"D96C1C52-1CA8-4647-98B2-12555B860B8C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.115:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"CA02B8E1-D46A-435F-B09A-258AA28FC0F1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.116:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"CECB2380-9590-4A4D-A180-A1A89F80DAFC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.200:rc14:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"A1ACDEC3-12FE-40B5-A834-01CDB1460EBB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.214:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"18F71579-6019-41A0-838C-6AF63D9BAA0E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.215:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"65BC4E89-19A1-40D9-8193-2912441E09CF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.216:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"13C0161E-79F2-4CFE-92F1-8E98AF4E102F\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.217:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"D896151D-C68E-4BE6-BD8C-9EA3A82B9AF4\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.220:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"971EFBD2-D8EE-4D09-AD5A-6A523AECD687\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.221:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"A0608E64-74AE-488C-A8FF-4AAACC4C75EC\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.222:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"34D76EB4-DBEA-4CAF-8378-4D23524EFCB0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.223:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"781A47E6-DDA6-4906-A3E3-45FBFC7C8C1C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.225:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"3FFC4328-CEE2-43A6-A6F6-74D8C9FB008B\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.226:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"A8613AEB-FAA7-40DB-91D5-516EEA029842\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.227:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"2A913C1C-1924-406F-A818-4B4D1316104C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.228:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"A6A780C8-0390-4A65-B54B-6160C120B04C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2210:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"14FDA12D-B6FF-4AB9-A320-CE8C49F9399E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2211:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"0F24718E-DEAA-4536-BCBB-0E4667B1F6C0\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2212:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"70FA3604-B340-4101-8EFB-C3AA8EB7F0C9\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2213:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"B4BAB184-481B-48B5-AB99-E37BD27ECE98\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2214:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"D3C5EAC7-A2D5-4474-B84F-90745434EA22\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2215:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"4620B9FD-B2B8-4C6A-8C4B-6F5644DF3D61\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.220:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"9A90902A-48C2-4911-BFB1-B7024850DF32\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.221:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"A2C81533-06C2-476D-9B39-101A824F1FCF\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.222:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"41895AEF-77C0-4BCE-89D4-5B50CEBCF2B6\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.223:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"AA0DABCD-C321-4705-ACA7-88DECE5859B3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.225:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"061FE061-E843-4D87-9484-BDEE13E4CF0A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.226:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"91B51F29-EECB-4B45-86C9-2FB56F2F1F10\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.227:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"D8E545C5-6938-431D-BBF4-A0B1795D061C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.228:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"DCC5C674-9736-4B19-BEAD-BED61084ECCA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2210:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"8DF93F43-6E65-4831-AAD4-0DEE8CAF8FD3\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2211:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"E31C1D7B-ABED-478D-A5A5-C2A0CEB424ED\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2212:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"4D3331D2-15AB-45A2-9091-03A9B5039592\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2213:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"3D297F6A-58EA-4CD1-98A4-AF3EFA66ED17\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2214:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"B0EC3A5F-5825-47AA-9D3F-E54EFB30A975\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2215:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"72CC34E0-5AD0-4F2C-9AF0-946E89CECB2E\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2216:*:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"4A229DC6-E298-4FDC-BEDC-208D1029F7CA\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.x:dev:*:*:*:drupal:*:*\",\"matchCriteriaId\":\"D343F8A2-F69C-46DB-8A5B-F0419AD86A75\"}]}]}],\"references\":[{\"url\":\"https://www.drupal.org/node/2360953\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.drupal.org/node/2360955\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.drupal.org/node/2361611\",\"source\":\"cve@mitre.org\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.drupal.org/node/2360953\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.drupal.org/node/2360955\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]},{\"url\":\"https://www.drupal.org/node/2361611\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Patch\",\"Third Party Advisory\"]}]}}"
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
Loading…
Loading…