U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Vulnerability Change Records for CVE-2015-2749

Change History

Initial Analysis by NIST 9/21/2017 1:06:05 PM

Action Type Old Value New Value
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.0:dev:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.0:rc1:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.0:rc2:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.0:rc3:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.0:rc4:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.13:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.15:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.16:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.17:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.18:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.19:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.20:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.21:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.22:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.23:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.24:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.25:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.26:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.27:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.28:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.29:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.30:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.31:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.32:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.33:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:6.34:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:alpha1:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:alpha2:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:alpha3:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:alpha4:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:alpha5:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:alpha6:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:alpha7:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:beta1:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:beta2:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:beta3:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:dev:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:rc1:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:rc2:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:rc3:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.0:rc4:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.1:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.2:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.3:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.4:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.5:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.6:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.7:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.8:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.9:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.10:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.11:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.12:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.13:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.14:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.15:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.16:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.17:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.18:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.19:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.20:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.21:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.22:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.23:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.24:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.25:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.26:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.27:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.28:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.29:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.30:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.31:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.32:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.33:*:*:*:*:*:*:*
     *cpe:2.3:a:drupal:drupal:7.34:*:*:*:*:*:*:*
Added CPE Configuration

								
							
							
						
OR
     *cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
Added CVSS V2

								
							
							
						
(AV:N/AC:M/Au:N/C:P/I:P/A:N)
Added CVSS V3

								
							
							
						
AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Added CWE

								
							
							
						
CWE-601
Changed Reference Type
http://cgit.drupalcode.org/drupal/commit/?id=d2304f840c43c190c6e136ee9901ed9797b4c3ca No Types Assigned
http://cgit.drupalcode.org/drupal/commit/?id=d2304f840c43c190c6e136ee9901ed9797b4c3ca Patch, Vendor Advisory
Changed Reference Type
http://www.debian.org/security/2015/dsa-3200 No Types Assigned
http://www.debian.org/security/2015/dsa-3200 Third Party Advisory
Changed Reference Type
http://www.openwall.com/lists/oss-security/2015/03/26/4 No Types Assigned
http://www.openwall.com/lists/oss-security/2015/03/26/4 Mailing List, Patch, VDB Entry
Changed Reference Type
http://www.securityfocus.com/bid/73219 No Types Assigned
http://www.securityfocus.com/bid/73219 Third Party Advisory, VDB Entry
Changed Reference Type
https://bugzilla.redhat.com/show_bug.cgi?id=1204753 No Types Assigned
https://bugzilla.redhat.com/show_bug.cgi?id=1204753 Issue Tracking
Changed Reference Type
https://www.drupal.org/SA-CORE-2015-001 No Types Assigned
https://www.drupal.org/SA-CORE-2015-001 Patch, Vendor Advisory