CVE-2014-9026

The Ubercart module 7.x-3.x before 7.x-3.7 for Drupal does not properly protect the per-user order history view, which allows remote authenticated users with…

published November 20, 2014

CVSS
—
EPSS
1%
Percentile
60.2
In the wild
Unconfirmed
What it is

The Ubercart module 7.x-3.x before 7.x-3.7 for Drupal does not properly protect the per-user order history view, which allows remote authenticated users with the "view own orders" permission to obtain sensitive information via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00937 · 60.2th percentile
Published
2014-11-20T17:00Z
EPSS history
Timeline
  • 20 NOV 17:00Z
    The Ubercart module 7.x-3.x before 7.x-3.7 for Drupal does not properly protect the per-user order history view, which allows remote authenticated users with…
    cvelistv5