Fluid Attacks Database

Description

Drupal Views can allow unauthorized users to see Statistics information The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Package	Affected version	Patched versions
packagist	drupal/core	>=8.0 <8.1.3	8.1.3
packagist	drupal/drupal	>=8.0 <8.1.3	8.1.3

Aliases

1. CVE-2016-62122. NVD-2016-62123. OSV-2016-62124. GCVE-2016-6212

References

1. https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/core/CVE-2016-6212.yaml2. https://github.com/FriendsOfPHP/security-advisories/blob/master/drupal/drupal/CVE-2016-6212.yaml3. https://www.drupal.org/SA-CORE-2016-0024. https://www.drupal.org/node/27493335. http://www.openwall.com/lists/oss-security/2016/07/13/46. http://www.openwall.com/lists/oss-security/2016/07/13/77. http://www.securityfocus.com/bid/91230