Read the docs
TI-2014-07165 Aliases CVE-2014-8735GHSA-9m2c-xgjp-gppg

The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for…

Priority LOW 21CWE-200Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
Partial · None · None
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-200.

Summary

The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" permission to obtain sensitive information by reading a log file.

Why it matters now

EPSS 0.01218 68th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 46

CPEVersionsRoleVendor
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc1:*:*:*:drupal:*:*6.x-1.0 rc1VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc2:*:*:*:drupal:*:*6.x-1.0 rc2VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.x:dev:*:*:*:drupal:*:*6.x-1.x devVulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.1:*:*:*:*:drupal:*:*6.x-2.1VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2:rc14:*:*:*:drupal:*:*6.x-2.2 rc14VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.13:*:*:*:*:drupal:*:*6.x-2.13VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.14:*:*:*:*:drupal:*:*6.x-2.14VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.113:*:*:*:*:drupal:*:*6.x-2.113VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.114:*:*:*:*:drupal:*:*6.x-2.114VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.115:*:*:*:*:drupal:*:*6.x-2.115VulnerableBad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc1:*:*:*:drupal:*:* Versions 6.x-1.0 rc1 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.0:rc2:*:*:*:drupal:*:* Versions 6.x-1.0 rc2 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-1.x:dev:*:*:*:drupal:*:* Versions 6.x-1.x dev Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.1:*:*:*:*:drupal:*:* Versions 6.x-2.1 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2:rc14:*:*:*:drupal:*:* Versions 6.x-2.2 rc14 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.13:*:*:*:*:drupal:*:* Versions 6.x-2.13 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.14:*:*:*:*:drupal:*:* Versions 6.x-2.14 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.113:*:*:*:*:drupal:*:* Versions 6.x-2.113 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.114:*:*:*:*:drupal:*:* Versions 6.x-2.114 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.115:*:*:*:*:drupal:*:* Versions 6.x-2.115 Vulnerable ·Bad Behavior Project
Show 36 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.116:*:*:*:*:drupal:*:*6.x-2.116VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.200:rc14:*:*:*:drupal:*:*6.x-2.200 rc14VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.214:*:*:*:*:drupal:*:*6.x-2.214VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.215:*:*:*:*:drupal:*:*6.x-2.215VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.216:*:*:*:*:drupal:*:*6.x-2.216VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.217:*:*:*:*:drupal:*:*6.x-2.217VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.220:*:*:*:*:drupal:*:*6.x-2.220VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.221:*:*:*:*:drupal:*:*6.x-2.221VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.222:*:*:*:*:drupal:*:*6.x-2.222VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.223:*:*:*:*:drupal:*:*6.x-2.223VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.225:*:*:*:*:drupal:*:*6.x-2.225VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.226:*:*:*:*:drupal:*:*6.x-2.226VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.227:*:*:*:*:drupal:*:*6.x-2.227VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.228:*:*:*:*:drupal:*:*6.x-2.228VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2210:*:*:*:*:drupal:*:*6.x-2.2210VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2211:*:*:*:*:drupal:*:*6.x-2.2211VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2212:*:*:*:*:drupal:*:*6.x-2.2212VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2213:*:*:*:*:drupal:*:*6.x-2.2213VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2214:*:*:*:*:drupal:*:*6.x-2.2214VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2215:*:*:*:*:drupal:*:*6.x-2.2215VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.220:*:*:*:*:drupal:*:*7.x-2.220VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.221:*:*:*:*:drupal:*:*7.x-2.221VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.222:*:*:*:*:drupal:*:*7.x-2.222VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.223:*:*:*:*:drupal:*:*7.x-2.223VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.225:*:*:*:*:drupal:*:*7.x-2.225VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.226:*:*:*:*:drupal:*:*7.x-2.226VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.227:*:*:*:*:drupal:*:*7.x-2.227VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.228:*:*:*:*:drupal:*:*7.x-2.228VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2210:*:*:*:*:drupal:*:*7.x-2.2210VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2211:*:*:*:*:drupal:*:*7.x-2.2211VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2212:*:*:*:*:drupal:*:*7.x-2.2212VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2213:*:*:*:*:drupal:*:*7.x-2.2213VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2214:*:*:*:*:drupal:*:*7.x-2.2214VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2215:*:*:*:*:drupal:*:*7.x-2.2215VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2216:*:*:*:*:drupal:*:*7.x-2.2216VulnerableBad Behavior Project
cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.x:dev:*:*:*:drupal:*:*7.x-2.x devVulnerableBad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.116:*:*:*:*:drupal:*:* Versions 6.x-2.116 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.200:rc14:*:*:*:drupal:*:* Versions 6.x-2.200 rc14 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.214:*:*:*:*:drupal:*:* Versions 6.x-2.214 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.215:*:*:*:*:drupal:*:* Versions 6.x-2.215 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.216:*:*:*:*:drupal:*:* Versions 6.x-2.216 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.217:*:*:*:*:drupal:*:* Versions 6.x-2.217 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.220:*:*:*:*:drupal:*:* Versions 6.x-2.220 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.221:*:*:*:*:drupal:*:* Versions 6.x-2.221 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.222:*:*:*:*:drupal:*:* Versions 6.x-2.222 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.223:*:*:*:*:drupal:*:* Versions 6.x-2.223 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.225:*:*:*:*:drupal:*:* Versions 6.x-2.225 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.226:*:*:*:*:drupal:*:* Versions 6.x-2.226 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.227:*:*:*:*:drupal:*:* Versions 6.x-2.227 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.228:*:*:*:*:drupal:*:* Versions 6.x-2.228 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2210:*:*:*:*:drupal:*:* Versions 6.x-2.2210 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2211:*:*:*:*:drupal:*:* Versions 6.x-2.2211 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2212:*:*:*:*:drupal:*:* Versions 6.x-2.2212 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2213:*:*:*:*:drupal:*:* Versions 6.x-2.2213 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2214:*:*:*:*:drupal:*:* Versions 6.x-2.2214 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:6.x-2.2215:*:*:*:*:drupal:*:* Versions 6.x-2.2215 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.220:*:*:*:*:drupal:*:* Versions 7.x-2.220 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.221:*:*:*:*:drupal:*:* Versions 7.x-2.221 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.222:*:*:*:*:drupal:*:* Versions 7.x-2.222 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.223:*:*:*:*:drupal:*:* Versions 7.x-2.223 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.225:*:*:*:*:drupal:*:* Versions 7.x-2.225 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.226:*:*:*:*:drupal:*:* Versions 7.x-2.226 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.227:*:*:*:*:drupal:*:* Versions 7.x-2.227 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.228:*:*:*:*:drupal:*:* Versions 7.x-2.228 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2210:*:*:*:*:drupal:*:* Versions 7.x-2.2210 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2211:*:*:*:*:drupal:*:* Versions 7.x-2.2211 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2212:*:*:*:*:drupal:*:* Versions 7.x-2.2212 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2213:*:*:*:*:drupal:*:* Versions 7.x-2.2213 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2214:*:*:*:*:drupal:*:* Versions 7.x-2.2214 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2215:*:*:*:*:drupal:*:* Versions 7.x-2.2215 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.2216:*:*:*:*:drupal:*:* Versions 7.x-2.2216 Vulnerable ·Bad Behavior Project
  • cpe:2.3:a:bad_behavior_project:bad_behavior:7.x-2.x:dev:*:*:*:drupal:*:* Versions 7.x-2.x dev Vulnerable ·Bad Behavior Project

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2014-8735
  2. 2026-10-03 Alias added: GHSA-9m2c-xgjp-gppg

References

Patch 3

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences