2016-11-25 19:59:00 2017-01-07 04:00:45

The taxonomy module in Drupal 7.x before 7.52 and 8.x before 8.2.3 might allow remote authenticated users to obtain sensitive information about taxonomy terms by leveraging inconsistent naming of access query tags.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

NONE

Availability

NONE
Drupal 7.0 Drupal 7.11 Drupal 7.10 Drupal Drupal 8.0.0 Beta6 (not an official CPE) Drupal 7.3 Drupal Drupal 8.0.0 Beta7 (not an official CPE) Drupal 7.4 Drupal Drupal 8.0.0 Rc1 (not an official CPE) Drupal Drupal 8.0.0 Alpha2 (not an official CPE) Drupal Drupal 8.2.0 (not an official CPE) Drupal Drupal 8.2.1 (not an official CPE) Drupal Drupal 8.0.0 Rc3 (not an official CPE) Drupal Drupal 8.0.0 Rc2 (not an official CPE) Drupal Drupal 8.0.0 Rc4 (not an official CPE) Drupal 7.26 Drupal 7.25 Drupal 7.24 Drupal 7.23 Drupal Drupal 8.0.0 Alpha12 (not an official CPE) Drupal 7.29 Drupal 7.28 Drupal Drupal 8.0.0 Alpha10 (not an official CPE) Drupal 7.27 Drupal Drupal 8.0.0 Alpha11 (not an official CPE) Drupal Drupal 8.0.0 Beta11 (not an official CPE) Drupal 7.22 Drupal Drupal 8.0.0 Beta13 (not an official CPE) Drupal 7.21 Drupal Drupal 8.0.0 Beta12 (not an official CPE) Drupal 7.20 Drupal 7.0 alpha7 Drupal Drupal 8.0.0 Beta15 (not an official CPE) Drupal 7.0 alpha6 Drupal Drupal 8.0.0 Beta14 (not an official CPE) Drupal 7.0 Release Candidate 4 Drupal 7.0 alpha5 Drupal 7.0 Release Candidate 3 Drupal 7.0 alpha4 Drupal Drupal 8.1.0 Beta1 (not an official CPE) Drupal Drupal 8.0.0 Beta16 (not an official CPE) Drupal 7.0 Release Candidate 2 Drupal 7.0 alpha3 Drupal Drupal 8.1.0 Beta2 (not an official CPE) Drupal 7.0 Release Candidate 1 Drupal 7.0 alpha2 Drupal 7.0 alpha1 Drupal 7.37 Drupal Drupal 8.0.0 Alpha8 (not an official CPE) Drupal 7.36 Drupal Drupal 8.0.0 Alpha7 (not an official CPE) Drupal 7.35 Drupal 7.34 Drupal Drupal 8.0.0 Alpha9 (not an official CPE) Drupal Drupal 8.0.0 Alpha4 (not an official CPE) Drupal Drupal 8.0.0 Alpha3 (not an official CPE) Drupal 7.0 dev Drupal Drupal 8.0.0 Alpha6 (not an official CPE) Drupal Drupal 7.38 Drupal Drupal 8.0.0 Alpha5 (not an official CPE) Drupal Drupal 8.0.0 Beta10 (not an official CPE) Drupal 7.33 Drupal Drupal 7.32 (not an official CPE) Drupal Drupal 7.31 (not an official CPE) Drupal 7.30 Drupal Drupal 8.1.0 Rc1 (not an official CPE) Drupal Drupal 7.40 (not an official CPE) Drupal Drupal 7.44 (not an official CPE) Drupal Drupal 7.43 (not an official CPE) Drupal Drupal 7.42 (not an official CPE) Drupal Drupal 7.41 (not an official CPE) Drupal Drupal 8.2.0 Beta3 (not an official CPE) Drupal Drupal 8.2.0 Beta1 (not an official CPE) Drupal Drupal 8.2.0 Beta2 (not an official CPE) Drupal Drupal 8.0.4 (not an official CPE) Drupal Drupal 8.0.5 (not an official CPE) Drupal Drupal 8.0.6 (not an official CPE) Drupal Drupal 7.51 (not an official CPE) Drupal Drupal 7.50 (not an official CPE) Drupal Drupal 8.0.0 (not an official CPE) Drupal Drupal 8.2.0 Rc1 (not an official CPE) Drupal Drupal 8.0.1 (not an official CPE) Drupal Drupal 8.0.2 (not an official CPE) Drupal Drupal 8.0.3 (not an official CPE) Drupal Drupal 8.2.0 Rc2 (not an official CPE) Drupal Drupal 8.1.7 (not an official CPE) Drupal Drupal 8.1.8 (not an official CPE) Drupal Drupal 8.1.9 (not an official CPE) Drupal Drupal 8.1.3 (not an official CPE) Drupal Drupal 8.1.4 (not an official CPE) Drupal Drupal 8.1.5 (not an official CPE) Drupal Drupal 8.1.6 (not an official CPE) Drupal 7.2 Drupal Drupal 8.0.0 Beta9 (not an official CPE) Drupal 7.1 Drupal 7.16 Drupal 7.17 Drupal Drupal 8.0.0 Alpha13 (not an official CPE) Drupal 7.18 Drupal Drupal 8.2.2 (not an official CPE) Drupal 7.19 Drupal Drupal 8.0.0 Alpha15 (not an official CPE) Drupal 7.12 Drupal Drupal 8.0.0 Alpha14 (not an official CPE) Drupal 7.13 Drupal 7.14 Drupal 7.15 Drupal Drupal 8.0.0 Beta4 (not an official CPE) Drupal Drupal 8.0.0 Beta3 (not an official CPE) Drupal Drupal 8.0.0 Beta2 (not an official CPE) Drupal Drupal 8.0.0 Beta1 (not an official CPE) Drupal 7.0 Beta 1 Drupal 7.0 Beta 3 Drupal 7.0 Beta 2 Drupal Drupal 8.1.2 (not an official CPE) Drupal Drupal 8.1.1 (not an official CPE) Drupal Drupal 8.1.0 (not an official CPE) Drupal Drupal 8.1.10 (not an official CPE)