CVEvulnerability

CVE-2016-6211

8.8 HIGH Published 2016-09-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2016-09-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
6.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:P
Weaknesses
CWE-264

Description

The User module in Drupal 7.x before 7.44 allows remote authenticated users to gain privileges via vectors involving contributed or custom code that triggers a rebuild of the user profile form.

Affected configurations

• drupal drupal 7.0 • drupal drupal 7.1 • drupal drupal 7.2 • drupal drupal 7.3 • drupal drupal 7.4 • drupal drupal 7.5 • drupal drupal 7.6 • drupal drupal 7.7 • drupal drupal 7.8 • drupal drupal 7.9 • drupal drupal 7.10 • drupal drupal 7.11 • drupal drupal 7.12 • drupal drupal 7.13 • drupal drupal 7.14 • drupal drupal 7.15 • drupal drupal 7.16 • drupal drupal 7.17 • drupal drupal 7.18 • drupal drupal 7.19 • drupal drupal 7.20 • drupal drupal 7.21 • drupal drupal 7.22 • drupal drupal 7.23 • drupal drupal 7.24 • drupal drupal 7.25 • drupal drupal 7.26 • drupal drupal 7.27 • drupal drupal 7.28 • drupal drupal 7.29 • drupal drupal 7.30 • drupal drupal 7.31 • drupal drupal 7.32 • drupal drupal 7.33 • drupal drupal 7.34 • drupal drupal 7.35 • drupal drupal 7.36 • drupal drupal 7.37 • drupal drupal 7.38 • drupal drupal 7.39 • drupal drupal 7.40 • drupal drupal 7.41 • drupal drupal 7.42 • drupal drupal 7.43 • drupal drupal 7.x-dev • debian debian linux 8.0

Related

Weakness · not in database (1)

References