What is the severity of CVE-2016-3165?

CVE-2016-3165 is categorized as a moderate severity vulnerability.

How do I fix CVE-2016-3165?

To fix CVE-2016-3165, upgrade to Drupal version 6.38 or later.

What versions are affected by CVE-2016-3165?

CVE-2016-3165 affects Drupal versions 6.x prior to 6.38.

What does CVE-2016-3165 allow an attacker to do?

CVE-2016-3165 allows attackers to bypass access restrictions on submit buttons.

Is there a patch available for CVE-2016-3165?

Yes, the patch for CVE-2016-3165 is included in Drupal version 6.38.

Vulnerability/
CVE-2016-3165

high

7.5

CWE

284

15/2/2016

12/4/2016

5/8/2024

CVE-2016-3165

First published: Mon Feb 15 2016(Updated: )

Form API ignores access restrictions on submit buttons

Credit: cve@mitre.org cve@mitre.org

Affected Software	Affected Version	How to fix
composer/drupal/core	>=8.0<8.0.4
composer/drupal/drupal	>=8.0<8.0.4
Drupal Drupal	=6.0
Drupal Drupal	=6.0-beta1
Drupal Drupal	=6.0-beta2
Drupal Drupal	=6.0-beta3
Drupal Drupal	=6.0-beta4
Drupal Drupal	=6.0-dev
Drupal Drupal	=6.0-rc1
Drupal Drupal	=6.0-rc2
Drupal Drupal	=6.0-rc3
Drupal Drupal	=6.0-rc4
Drupal Drupal	=6.1
Drupal Drupal	=6.2
Drupal Drupal	=6.3
Drupal Drupal	=6.4
Drupal Drupal	=6.5
Drupal Drupal	=6.6
Drupal Drupal	=6.7
Drupal Drupal	=6.8
Drupal Drupal	=6.9
Drupal Drupal	=6.10
Drupal Drupal	=6.11
Drupal Drupal	=6.12
Drupal Drupal	=6.13
Drupal Drupal	=6.14
Drupal Drupal	=6.15
Drupal Drupal	=6.16
Drupal Drupal	=6.17
Drupal Drupal	=6.18
Drupal Drupal	=6.19
Drupal Drupal	=6.20
Drupal Drupal	=6.21
Drupal Drupal	=6.22
Drupal Drupal	=6.23
Drupal Drupal	=6.24
Drupal Drupal	=6.25
Drupal Drupal	=6.26
Drupal Drupal	=6.27
Drupal Drupal	=6.28
Drupal Drupal	=6.29
Drupal Drupal	=6.30
Drupal Drupal	=6.31
Drupal Drupal	=6.32
Drupal Drupal	=6.33
Drupal Drupal	=6.34
Drupal Drupal	=6.35
Drupal Drupal	=6.36
Drupal Drupal	=6.37
composer/drupal/drupal	>=6.0<6.38	6.38
composer/drupal/core	>=6.0<6.38	6.38
	=6.0
	=6.0-beta1
	=6.0-beta2
	=6.0-beta3
	=6.0-beta4
	=6.0-dev
	=6.0-rc1
	=6.0-rc2
	=6.0-rc3
	=6.0-rc4
	=6.1
	=6.2
	=6.3
	=6.4
	=6.5
	=6.6
	=6.7
	=6.8
	=6.9
	=6.10
	=6.11
	=6.12
	=6.13
	=6.14
	=6.15
	=6.16
	=6.17
	=6.18
	=6.19
	=6.20
	=6.21
	=6.22
	=6.23
	=6.24
	=6.25
	=6.26
	=6.27
	=6.28
	=6.29
	=6.30
	=6.31
	=6.32
	=6.33
	=6.34
	=6.35
	=6.36
	=6.37

Remedy

https://www.drupal.org/SA-CORE-2016-001

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2016-3165?
CVE-2016-3165 is categorized as a moderate severity vulnerability.
How do I fix CVE-2016-3165?
To fix CVE-2016-3165, upgrade to Drupal version 6.38 or later.
What versions are affected by CVE-2016-3165?
CVE-2016-3165 affects Drupal versions 6.x prior to 6.38.
What does CVE-2016-3165 allow an attacker to do?
CVE-2016-3165 allows attackers to bypass access restrictions on submit buttons.
Is there a patch available for CVE-2016-3165?
Yes, the patch for CVE-2016-3165 is included in Drupal version 6.38.

collector/friends-of-php
collector/nvd-index
agent/type
agent/first-publish-date
collector/github-advisory-latest
source/GitHub
alias/GHSA-4gh5-3hqj-x3pj
alias/CVE-2016-3165
agent/software-canonical-lookup
agent/remedy
agent/weakness
agent/severity
agent/references
agent/description
agent/author
agent/softwarecombine
collector/nvd-cve
source/NVD
collector/github-advisory
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
agent/trending
agent/tags
agent/source
package-manager/composer
vendor/drupal
canonical/drupal drupal
version/drupal drupal/6.0
version/drupal drupal/6.0-beta1
version/drupal drupal/6.0-beta2
version/drupal drupal/6.0-beta3
version/drupal drupal/6.0-beta4
version/drupal drupal/6.0-dev
version/drupal drupal/6.0-rc1
version/drupal drupal/6.0-rc2
version/drupal drupal/6.0-rc3
version/drupal drupal/6.0-rc4
version/drupal drupal/6.1
version/drupal drupal/6.2
version/drupal drupal/6.3
version/drupal drupal/6.4
version/drupal drupal/6.5
version/drupal drupal/6.6
version/drupal drupal/6.7
version/drupal drupal/6.8
version/drupal drupal/6.9
version/drupal drupal/6.10
version/drupal drupal/6.11
version/drupal drupal/6.12
version/drupal drupal/6.13
version/drupal drupal/6.14
version/drupal drupal/6.15
version/drupal drupal/6.16
version/drupal drupal/6.17
version/drupal drupal/6.18
version/drupal drupal/6.19
version/drupal drupal/6.20
version/drupal drupal/6.21
version/drupal drupal/6.22
version/drupal drupal/6.23
version/drupal drupal/6.24
version/drupal drupal/6.25
version/drupal drupal/6.26
version/drupal drupal/6.27
version/drupal drupal/6.28
version/drupal drupal/6.29
version/drupal drupal/6.30
version/drupal drupal/6.31
version/drupal drupal/6.32
version/drupal drupal/6.33
version/drupal drupal/6.34
version/drupal drupal/6.35
version/drupal drupal/6.36
version/drupal drupal/6.37