How severe is CVE-2017-6930?

This vulnerability has a severity rating of HIGH with a CVSS score of 8.1 out of 10.

What type of vulnerability is CVE-2017-6930?

This is classified as NVD-CWE-Other, which is a common weakness in software security.

CVE-2017-6930 - HIGH Severity | CVSS 8.1

Vulnerability Description

In Drupal versions 8.4.x versions before 8.4.5 when using node access controls with a multilingual site, Drupal marks the untranslated version of a node as the default fallback for access queries. This fallback is used for languages that do not yet have a translated version of the created node. This can result in an access bypass vulnerability. This issue is mitigated by the fact that it only applies to sites that a) use the Content Translation module; and b) use a node access module such as Domain Access which implement hook_node_access_records().

Related Vulnerabilities

CVE-2006-5160

HIGH

CVSS:8.1(High)

Multiple unspecified vulnerabilities in Mozilla Firefox have unspecified vectors and impact, as claimed during ToorCon 2006. NOTE: the vendor and original researchers have released a follow-up comment...

NVD-CWE-Other2006

CVE-2012-0003

HIGH

CVSS:8.1(High)

Unspecified vulnerability in winmm.dll in Windows Multimedia Library in Windows Media Player (WMP) in Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista SP2, and Server 2008 SP2 allows remote at...

NVD-CWE-Other2012

CVE-2012-0063

HIGH

CVSS:8.1(High)

Insecure plugin update mechanism in tucan through 0.3.10 could allow remote attackers to perform man-in-the-middle attacks and execute arbitrary code ith the permissions of the user running tucan.

NVD-CWE-Other2012

CVE-2013-6040

HIGH

CVSS:8.1(High)

MW6 Aztec, DataMatrix, and MaxiCode ActiveX controls before version 4.0 vulnerable to arbitrary code via a crafted HTML document. Latest versions (4.0) of MW6 Aztec, DataMatrix, and MaxiCode ActiveX c...

NVD-CWE-Other2013

CVE-2014-2680

HIGH

CVSS:8.1(High)

The update process in Xmind 3.4.1 and earlier allow remote attackers to execute arbitrary code via a man-in-the-middle attack.

NVD-CWE-Other2014

CVE-2015-5346

HIGH

CVSS:8.1(High)

Session fixation vulnerability in Apache Tomcat 7.x before 7.0.66, 8.x before 8.0.30, and 9.x before 9.0.0.M2, when different session settings are used for deployments of multiple versions of the same...

NVD-CWE-Other2015