CVE Vulnerabilities

CVE-2016-6211

Published: Sep 09, 2016 | Modified: Nov 28, 2016
CVSS 3.x
8.8
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.x
6.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form.

Affected Software

Name Vendor Start Version End Version
Drupal Drupal 7.0 (including) 7.0 (including)
Drupal Drupal 7.0-alpha1 (including) 7.0-alpha1 (including)
Drupal Drupal 7.0-alpha2 (including) 7.0-alpha2 (including)
Drupal Drupal 7.0-alpha3 (including) 7.0-alpha3 (including)
Drupal Drupal 7.0-alpha4 (including) 7.0-alpha4 (including)
Drupal Drupal 7.0-alpha5 (including) 7.0-alpha5 (including)
Drupal Drupal 7.0-alpha6 (including) 7.0-alpha6 (including)
Drupal Drupal 7.0-alpha7 (including) 7.0-alpha7 (including)
Drupal Drupal 7.0-beta1 (including) 7.0-beta1 (including)
Drupal Drupal 7.0-beta2 (including) 7.0-beta2 (including)
Drupal Drupal 7.0-beta3 (including) 7.0-beta3 (including)
Drupal Drupal 7.0-dev (including) 7.0-dev (including)
Drupal Drupal 7.0-rc1 (including) 7.0-rc1 (including)
Drupal Drupal 7.0-rc2 (including) 7.0-rc2 (including)
Drupal Drupal 7.0-rc3 (including) 7.0-rc3 (including)
Drupal Drupal 7.0-rc4 (including) 7.0-rc4 (including)
Drupal Drupal 7.1 (including) 7.1 (including)
Drupal Drupal 7.2 (including) 7.2 (including)
Drupal Drupal 7.3 (including) 7.3 (including)
Drupal Drupal 7.4 (including) 7.4 (including)
Drupal Drupal 7.5 (including) 7.5 (including)
Drupal Drupal 7.6 (including) 7.6 (including)
Drupal Drupal 7.7 (including) 7.7 (including)
Drupal Drupal 7.8 (including) 7.8 (including)
Drupal Drupal 7.9 (including) 7.9 (including)
Drupal Drupal 7.10 (including) 7.10 (including)
Drupal Drupal 7.11 (including) 7.11 (including)
Drupal Drupal 7.12 (including) 7.12 (including)
Drupal Drupal 7.13 (including) 7.13 (including)
Drupal Drupal 7.14 (including) 7.14 (including)
Drupal Drupal 7.15 (including) 7.15 (including)
Drupal Drupal 7.16 (including) 7.16 (including)
Drupal Drupal 7.17 (including) 7.17 (including)
Drupal Drupal 7.18 (including) 7.18 (including)
Drupal Drupal 7.19 (including) 7.19 (including)
Drupal Drupal 7.20 (including) 7.20 (including)
Drupal Drupal 7.21 (including) 7.21 (including)
Drupal Drupal 7.22 (including) 7.22 (including)
Drupal Drupal 7.23 (including) 7.23 (including)
Drupal Drupal 7.24 (including) 7.24 (including)
Drupal Drupal 7.25 (including) 7.25 (including)
Drupal Drupal 7.26 (including) 7.26 (including)
Drupal Drupal 7.27 (including) 7.27 (including)
Drupal Drupal 7.28 (including) 7.28 (including)
Drupal Drupal 7.29 (including) 7.29 (including)
Drupal Drupal 7.30 (including) 7.30 (including)
Drupal Drupal 7.31 (including) 7.31 (including)
Drupal Drupal 7.32 (including) 7.32 (including)
Drupal Drupal 7.33 (including) 7.33 (including)
Drupal Drupal 7.34 (including) 7.34 (including)
Drupal Drupal 7.35 (including) 7.35 (including)
Drupal Drupal 7.36 (including) 7.36 (including)
Drupal Drupal 7.37 (including) 7.37 (including)
Drupal Drupal 7.38 (including) 7.38 (including)
Drupal Drupal 7.39 (including) 7.39 (including)
Drupal Drupal 7.40 (including) 7.40 (including)
Drupal Drupal 7.41 (including) 7.41 (including)
Drupal Drupal 7.42 (including) 7.42 (including)
Drupal Drupal 7.43 (including) 7.43 (including)
Drupal Drupal 7.x-dev (including) 7.x-dev (including)
Drupal6 Ubuntu precise *
Drupal7 Ubuntu esm-apps/xenial *
Drupal7 Ubuntu esm-infra-legacy/trusty *
Drupal7 Ubuntu precise *
Drupal7 Ubuntu trusty *
Drupal7 Ubuntu trusty/esm *
Drupal7 Ubuntu upstream *
Drupal7 Ubuntu wily *
Drupal7 Ubuntu xenial *

References