Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2016-7572

The system.temporary route in Drupal 8.x before 8.1.10 does not properly check for "Export configuration" permission, which allows remote authenticated users to bypass intended access restrictions and read a full config export via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 56.3%
CVSS Severity
CVSS v3 Score 4.3
CVSS v2 Score 4.0
Products affected by CVE-2016-7572
  • Drupal » Drupal » Version: 8.0.0
    cpe:2.3:a:drupal:drupal:8.0.0
  • Drupal » Drupal » Version: 8.0.1
    cpe:2.3:a:drupal:drupal:8.0.1
  • Drupal » Drupal » Version: 8.0.2
    cpe:2.3:a:drupal:drupal:8.0.2
  • Drupal » Drupal » Version: 8.0.3
    cpe:2.3:a:drupal:drupal:8.0.3
  • Drupal » Drupal » Version: 8.0.4
    cpe:2.3:a:drupal:drupal:8.0.4
  • Drupal » Drupal » Version: 8.0.5
    cpe:2.3:a:drupal:drupal:8.0.5
  • Drupal » Drupal » Version: 8.0.6
    cpe:2.3:a:drupal:drupal:8.0.6
  • Drupal » Drupal » Version: 8.1.0
    cpe:2.3:a:drupal:drupal:8.1.0
  • Drupal » Drupal » Version: 8.1.1
    cpe:2.3:a:drupal:drupal:8.1.1
  • Drupal » Drupal » Version: 8.1.2
    cpe:2.3:a:drupal:drupal:8.1.2
  • Drupal » Drupal » Version: 8.1.3
    cpe:2.3:a:drupal:drupal:8.1.3
  • Drupal » Drupal » Version: 8.1.4
    cpe:2.3:a:drupal:drupal:8.1.4
  • Drupal » Drupal » Version: 8.1.5
    cpe:2.3:a:drupal:drupal:8.1.5
  • Drupal » Drupal » Version: 8.1.6
    cpe:2.3:a:drupal:drupal:8.1.6
  • Drupal » Drupal » Version: 8.1.7
    cpe:2.3:a:drupal:drupal:8.1.7
  • Drupal » Drupal » Version: 8.1.8
    cpe:2.3:a:drupal:drupal:8.1.8
  • Drupal » Drupal » Version: 8.1.9
    cpe:2.3:a:drupal:drupal:8.1.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved