CVEvulnerability
CVE-2015-4355
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2015-06-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in the Watchdog Aggregator module for Drupal allows remote attackers to hijack the authentication of administrators for requests that enable or disable monitoring sites via unspecified vectors.
Affected configurations
• watchdog aggregator project watchdog aggregator
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://www.openwall.com/lists/oss-security/2015/04/25/6 www.openwall.com
- http://www.securityfocus.com/bid/72810 www.securityfocus.com
- https://www.drupal.org/node/2437993 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2015/04/25/6 www.openwall.com
- http://www.securityfocus.com/bid/72810 www.securityfocus.com
- https://www.drupal.org/node/2437993 Vendor Advisory