The Ubercart module 7.x-3.x before 7.x-3.7 for Drupal does not properly protect the per-user order history view, which allows remote authenticated users with the view own orders permission to obtain sensitive information via unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.0 | 7.x-3.0 |
| Ubercart | Ubercart | 7.x-3.1 | 7.x-3.1 |
| Ubercart | Ubercart | 7.x-3.2 | 7.x-3.2 |
| Ubercart | Ubercart | 7.x-3.3 | 7.x-3.3 |
| Ubercart | Ubercart | 7.x-3.4 | 7.x-3.4 |
| Ubercart | Ubercart | 7.x-3.5 | 7.x-3.5 |
| Ubercart | Ubercart | 7.x-3.6 | 7.x-3.6 |
| Ubercart | Ubercart | 7.x-3.7 | 7.x-3.7 |
| Ubercart | Ubercart | 7.x-3.x-dev | 7.x-3.x-dev |