Unrated severityNVD Advisory· Published Mar 25, 2015· Updated May 6, 2026
CVE-2015-2559
CVE-2015-2559
Description
Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of other accounts by leveraging an account with the same password hash as another account and a crafted password reset URL.
Affected products
2- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
3- www.debian.org/security/2015/dsa-3200nvdThird Party Advisory
- www.securityfocus.com/bid/73219nvdThird Party AdvisoryVDB Entry
- www.drupal.org/SA-CORE-2015-001nvdVendor Advisory
News mentions
0No linked articles in our index yet.