CVEvulnerability
CVE-2014-9023
5.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-11-20
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The Twilio module 7.x-1.x before 7.x-1.9 for Drupal does not properly restrict access to the Twilio administration pages, which allows remote authenticated users to read and modify authentication tokens by leveraging the "access administration pages" Drupal permission.
Affected configurations
• twilio project twilio 7.x-1.1
• twilio project twilio 7.x-1.2
• twilio project twilio 7.x-1.4
• twilio project twilio 7.x-1.5
• twilio project twilio 7.x-1.6
• twilio project twilio 7.x-1.8
• twilio project twilio 7.x-1.9
Related
Weakness · not in database (1)
References
- https://www.drupal.org/node/2337623 Vendor Advisory
- https://www.drupal.org/node/2344363 Vendor Advisory
- https://www.drupal.org/node/2337623 Vendor Advisory
- https://www.drupal.org/node/2344363 Vendor Advisory