CVE-2015-5509

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-08-18 · updated 2026-06-17
Weakness: CWE-264

Description

The Administration Views module 7.x-1.x before 7.x-1.4 for Drupal, when used with other unspecified modules, does not properly grant access to administration pages, which allows remote administrators to bypass intended restrictions via unspecified vectors.

Affected products

Administration Views Project Administration Views: 7.x-1.0, 7.x-1.0-rc1, 7.x-1.1, 7.x-1.2, 7.x-1.x-dev

References

http://www.openwall.com/lists/oss-security/2015/07/04/4
http://www.securityfocus.com/bid/75278
https://www.drupal.org/node/2430043
https://www.drupal.org/node/2507645
http://www.openwall.com/lists/oss-security/2015/07/04/4
http://www.securityfocus.com/bid/75278
https://www.drupal.org/node/2430043
https://www.drupal.org/node/2507645

Get alerted when CVE-2015-5509 or the next vulnerability affects your stack