PatchTheCVEhostmaster vulnerabilities and fixes
Recent CVEs affecting hostmaster, with upgrade or downgrade steps. 3 tracked.
hostmaster has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2015-08-18. Highest priority: CVE-2015-5501 (score 47/100).
- CVE-2015-5501 HIGH 7.5 DOWNGRADE The Hostmaster (Aegir) module 6.x-2.x before 6.x-2.4 and 7.x-3.x before 7.x-3.0-beta2 for Drupal allows remote
- CVE-2012-2708 LOW 2.1 DOWNGRADE Cross-site scripting (XSS) vulnerability in the _hosting_task_log_table function in modules/hosting/task/hosti
- CVE-2012-2707 MEDIUM 5.8 DOWNGRADE The Hostmaster (Aegir) module 6.x-1.x before 6.x-1.9 for Drupal does not properly exit when users do not have
FAQ
How do I fix hostmaster vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is hostmaster being exploited right now?
None of the tracked hostmaster CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which hostmaster CVE should I patch first?
CVE-2015-5501 currently ranks highest (47/100): The Hostmaster (Aegir) module 6.x-2.x before 6.x-2.4 and 7.x-3.x before 7.x-3.0-beta2 for Drupal allows remote.