Back to Database
Status published
High
CVE-2016-20003
The REST/JSON project 7.x-1.x for Drupal allows user enumeration, aka...
Vulnerability Description
The REST/JSON project 7.x-1.x for Drupal allows user enumeration, aka SA-CONTRIB-2016-033. NOTE: This project is not covered by Drupal's security advisory policy.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-20003
Credits & Attribution
No credits recorded in the NVD database.
References
More from rest\/json project
View All →CVE-2016-20008
The REST/JSON project 7.x-1.x for Drupal allows session enumeration, aka...
High
7.5
CVE-2016-20007
The REST/JSON project 7.x-1.x for Drupal allows session name guessing,...
High
7.5
CVE-2016-20006
The REST/JSON project 7.x-1.x for Drupal allows blockage of user...
High
7.5
CVE-2016-20005
The REST/JSON project 7.x-1.x for Drupal allows user registration bypass,...
Critical
9.8
CVE-2016-20004
The REST/JSON project 7.x-1.x for Drupal allows field access bypass,...
Critical
9.8
Affected Vendor
rest\/json project
View all reports →Affected Software
rest\/json
Vulnerable Versions:
0
Timeline
Official Publish:
December 31st, 2020
Last Modified:
August 6th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.