Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

The remote Ubuntu 16.04 ESM host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4773-1 advisory.

  - Drupal 6.x before 6.35 and 7.x before 7.35 allows remote authenticated users to reset the password of     other accounts by leveraging an account with the same password hash as another account and a crafted     password reset URL. (CVE-2015-2559)

  - Open redirect vulnerability in Drupal 6.x before 6.35 and 7.x before 7.35 allows remote attackers to     redirect users to arbitrary web sites and conduct phishing attacks via a URL in the destination parameter.
    (CVE-2015-2749)

  - Open redirect vulnerability in URL-related API functions in Drupal 6.x before 6.35 and 7.x before 7.35     allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via vectors     involving the // initial sequence. (CVE-2015-2750)

  - Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers     to execute arbitrary code because of an issue affecting multiple subsystems with default or common module     configurations. (CVE-2018-7600)

  - A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This     potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in     the site being compromised. This vulnerability is related to Drupal core - Highly critical - Remote Code     Execution - SA-CORE-2018-002. Both SA-CORE-2018-002 and this vulnerability are being exploited in the     wild. (CVE-2018-7602)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

-     [8.4.6](https://www.drupal.org/project/drupal/releases/8     .4.6)

  - [SA-CORE-2018-002     (CVE-2018-7600)](https://www.drupal.org/SA-CORE-2018-002     )

  -     [8.4.5](https://www.drupal.org/project/drupal/releases/8     .4.5)

  - [SA-CORE-2018-001 (CVE-2017-6926 / CVE-2017-6927 /     CVE-2017-6930 /     CVE-2017-6931)](https://www.drupal.org/SA-CORE-2018-001)

  -     [8.4.4](https://www.drupal.org/project/drupal/releases/8     .4.4)

  -     [8.4.3](https://www.drupal.org/project/drupal/releases/8     .4.3)

  -     [8.4.2](https://www.drupal.org/project/drupal/releases/8     .4.2)

  -     [8.4.1](https://www.drupal.org/project/drupal/releases/8     .4.1)

  -     [8.4.0](https://www.drupal.org/project/drupal/releases/8     .4.0)

  -     [8.4.0-rc2](https://www.drupal.org/project/drupal/releas     es/8.4.0-rc2)

  -     [8.4.0-rc1](https://www.drupal.org/project/drupal/releas     es/8.4.0-rc1)

  -     [8.4.0-beta1](https://www.drupal.org/project/drupal/rele     ases/8.4.0-beta1)

  -     [8.4.0-alpha1](https://www.drupal.org/project/drupal/rel     eases/8.4.0-alpha1)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version number, the detected Drupal application is affected by a remote code execution vulnerability.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised.

Note: This has been detected using an active check and should be remediated immediately.

-     [8.3.9](https://www.drupal.org/project/drupal/releases/8     .3.9)

  - [SA-CORE-2018-002     (CVE-2018-7600)](https://www.drupal.org/SA-CORE-2018-002     )

  -     [8.3.8](https://www.drupal.org/project/drupal/releases/8     .3.8)

  - [SA-CORE-2018-001 (CVE-2017-6926 / CVE-2017-6927 /     CVE-2017-6930 /     CVE-2017-6931)](https://www.drupal.org/SA-CORE-2018-001)

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Drupal Security Team reports :

CVE-2018-7600: Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations.

The Drupal CMS installed on the remote host is affected by a remote command execution vulnerability. A remote, unauthenticated attacker can leverage this issue to execute arbitrary commands on the remote host.

The version of Drupal installed on the remote server is 8.5.x prior to 8.5.1, and is affected by a flaw in the 'preHandle()' function in 'core/lib/Drupal/Core/DrupalKernel.php' that is triggered as certain parameter keys within HTTP requests are not properly sanitized. This may allow a remote attacker to execute arbitrary code. This issue may be exploited using multiple unspecified attack vectors.

The version of Drupal installed on the remote server is 8.4.x prior to 8.4.6, and is affected by a flaw in the 'preHandle()' function in 'core/lib/Drupal/Core/DrupalKernel.php' that is triggered as certain parameter keys within HTTP requests are not properly sanitized. This may allow a remote attacker to execute arbitrary code. This issue may be exploited using multiple unspecified attack vectors.

The version of Drupal installed on the remote server is 8.x prior to 8.3.9, and is affected by a flaw in the 'preHandle()' function in 'core/lib/Drupal/Core/DrupalKernel.php' that is triggered as certain parameter keys within HTTP requests are not properly sanitized. This may allow a remote attacker to execute arbitrary code. This issue may be exploited using multiple unspecified attack vectors.

The version of Drupal installed on the remote server is 7.x prior to 7.58, and is affected by a flaw in the 'preHandle()' function in 'core/lib/Drupal/Core/DrupalKernel.php' that is triggered as certain parameter keys within HTTP requests are not properly sanitized. This may allow a remote attacker to execute arbitrary code. This issue may be exploited using multiple unspecified attack vectors.

A remote code execution vulnerability has been found in Drupal, a fully-featured content management framework. For additional information, please refer to the upstream advisory at https://www.drupal.org/sa-core-2018-002

Jasper Mattsson found a remote code execution vulnerability in the Drupal content management system. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being completely compromised.

For further information please refer to the official upstream advisory at https://www.drupal.org/sa-core-2018-002.

For Debian 7 'Wheezy', these problems have been fixed in version 7.14-2+deb7u18.

We recommend that you upgrade your drupal7 packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to its self-reported version, the instance of Drupal running on the remote web server is 7.x prior to 7.58, 8.3.x prior to 8.3.9, 8.4.x prior to 8.4.6, or 8.5.x prior to 8.5.1. It is, therefore, affected by a remote code execution vulnerability.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
183539	Ubuntu 16.04 ESM : Drupal vulnerabilities (USN-4773-1)	Nessus	Ubuntu Local Security Checks	critical
120615	Fedora 28 : drupal8 (2018-906ba26b4d) (Drupalgeddon 2)	Nessus	Fedora Local Security Checks	critical
98570	Drupal 7.x < 7.58 Remote Code Execution Vulnerability	Web App Scanning	Component Vulnerability	critical
98569	Drupal 8.0.x < 8.5.1 Remote Code Execution Vulnerability	Web App Scanning	Component Vulnerability	critical
98568	Drupal 8.1.x < 8.5.1 Remote Code Execution Vulnerability	Web App Scanning	Component Vulnerability	critical
98567	Drupal 8.2.x < 8.5.1 Remote Code Execution Vulnerability	Web App Scanning	Component Vulnerability	critical
98566	Drupal 8.3.x < 8.3.9 Remote Code Execution Vulnerability	Web App Scanning	Component Vulnerability	critical
98565	Drupal 8.4.x < 8.4.6 Remote Code Execution Vulnerability	Web App Scanning	Component Vulnerability	critical
98564	Drupal 8.5.x < 8.5.1 Remote Code Execution Vulnerability	Web App Scanning	Component Vulnerability	critical
98216	Drupal < 7.58 / 8.x < 8.3.9 / 8.4.x < 8.4.6 / 8.5.x < 8.5.1 Remote Code Execution	Web App Scanning	Component Vulnerability	critical
109288	Fedora 26 : drupal8 (2018-922cc2fbaa) (Drupalgeddon 2)	Nessus	Fedora Local Security Checks	critical
109055	FreeBSD : drupal -- Drupal Core - Multiple Vulnerabilities (a9e466e8-4144-11e8-a292-00e04c1ea73d) (Drupalgeddon 2)	Nessus	FreeBSD Local Security Checks	critical
109041	Drupal Remote Code Execution Vulnerability (SA-CORE-2018-002) (exploit)	Nessus	CGI abuses	critical
700230	Drupal 8.5.x < 8.5.1 RCE	Nessus Network Monitor	CGI	critical
700229	Drupal 8.4.x < 8.4.6 RCE	Nessus Network Monitor	CGI	critical
700228	Drupal 8.x < 8.3.9 RCE	Nessus Network Monitor	CGI	critical
700224	Drupal 7.x < 7.58 RCE	Nessus Network Monitor	CGI	critical
108698	Debian DSA-4156-1 : drupal7 - security update (Drupalgeddon 2)	Nessus	Debian Local Security Checks	critical
108695	Debian DLA-1325-1 : drupal7 security update (Drupalgeddon 2)	Nessus	Debian Local Security Checks	critical
108688	Drupal 7.x < 7.58 / 8.3.x < 8.3.9 / 8.4.x < 8.4.6 / 8.5.x < 8.5.1 Remote Code Execution Vulnerability (SA-CORE-2018-002)	Nessus	CGI abuses	critical

Detections

Analytics

CVE-2018-7600

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical