CVE-2016-6212

The Views module 7.x-3.x before 7.x-3.14 in Drupal 7.x and the Views module in Drupal 8.x before 8.1.3 might allow remote authenticated users to bypass intended access restrictions and obtain sensitive Statistics information via unspecified vectors.

• CWE-200

• http://www.openwall.com/lists/oss-security/2016/07/13/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/13/7Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/91230
• https://www.drupal.org/SA-CORE-2016-002Vendor Advisory
• https://www.drupal.org/node/2749333Vendor Advisory
• http://www.openwall.com/lists/oss-security/2016/07/13/4Mailing List, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2016/07/13/7Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/91230
• https://www.drupal.org/SA-CORE-2016-002Vendor Advisory
• https://www.drupal.org/node/2749333Vendor Advisory

Published

Sep 9, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6204Cross-site scripting (XSS) vulnerability in the integrated w…
• CVE-2016-6206Huawei AR3200 routers with software before V200R007C00SPC600…
• CVE-2016-6207Integer overflow in the _gdContributionsAlloc function in gd…6.5
• CVE-2016-6209Cross-site scripting (XSS) vulnerability in Nagios.
• CVE-2016-6210sshd in OpenSSH before 7.3, when SHA256 or SHA512 are used f…5.9
• CVE-2016-6211The User module in Drupal 7.x before 7.44 allows remote auth…
• CVE-2016-6213fs/namespace.c in the Linux kernel before 4.9 does not restr…
• CVE-2016-6214gd_tga.c in the GD Graphics Library (aka libgd) before 2.2.3…
• CVE-2016-6217Cross-site scripting (XSS) vulnerability in Sophos PureMessa…
• CVE-2016-6220Information Disclosure vulnerability in the Dashboard and Er…7.5
• CVE-2016-6223The TIFFReadRawStrip1 and TIFFReadRawTile1 functions in tif_…
• CVE-2016-6224ecryptfs-setup-swap in eCryptfs does not prevent the unencry…