VULNERABILITY INTELLIGENCE

CVE-2015-3373

CVSS score5 MEDIUM
EPSS probability2.07%
CISA KEVNot currently listed
Published2015-04-21
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:P/I:N/A:N

Description

The Amazon AWS module before 7.x-1.3 for Drupal uses the base URL and AWS access key to generate the access token, which makes it easier for remote attackers to guess the token value and create backups via a crafted URL.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references