Back to Database
Status published
Medium
CVE-2014-8735
The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before...
Vulnerability Description
The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" permission to obtain sensitive information by reading a log file.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-8735
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
bad behavior project
View all reports →Affected Software
bad behavior
Vulnerable Versions:
6.x-1.0, 6.x-1.x, 6.x-2.1, 6.x-2.2, 6.x-2.13, 6.x-2.14, 6.x-2.113, 6.x-2.114, 6.x-2.115, 6.x-2.116, 6.x-2.200, 6.x-2.214, 6.x-2.215, 6.x-2.216, 6.x-2.217, 6.x-2.220, 6.x-2.221, 6.x-2.222, 6.x-2.223, 6.x-2.225, 6.x-2.226, 6.x-2.227, 6.x-2.228, 6.x-2.2210, 6.x-2.2211, 6.x-2.2212, 6.x-2.2213, 6.x-2.2214, 6.x-2.2215, 7.x-2.220, 7.x-2.221, 7.x-2.222, 7.x-2.223, 7.x-2.225, 7.x-2.226, 7.x-2.227, 7.x-2.228, 7.x-2.2210, 7.x-2.2211, 7.x-2.2212, 7.x-2.2213, 7.x-2.2214, 7.x-2.2215, 7.x-2.2216, 7.x-2.x
Timeline
Official Publish:
November 12th, 2014
Last Modified:
September 17th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.