CVE-2015-5496

The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via unspecified vectors

published August 18, 2015

CVSS
—
EPSS
1%
Percentile
71.9
In the wild
Unconfirmed
What it is

The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via unspecified vectors.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01381 · 71.9th percentile
Published
2015-08-18T17:00Z
EPSS history
Timeline
  • 18 AUG 17:00Z
    The pass2pdf module for Drupal does not restrict access to generated PDF files, which allows remote attackers to obtain user passwords via unspecified vectors
    cvelistv5