Description (CNA)
Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://drupalcode.org/project/drupal.git/commitdiff/da8023a
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:074
- http://drupal.org/SA-CORE-2012-004
- http://www.securityfocus.com/bid/56993
- http://drupalcode.org/project/drupal.git/commitdiff/b47f95d
- http://www.osvdb.org/88528
- http://www.debian.org/security/2013/dsa-2776
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80792
- http://www.openwall.com/lists/oss-security/2012/12/20/1
ADP enrichment
No English description supplied.
- http://drupalcode.org/project/drupal.git/commitdiff/da8023a
- http://www.mandriva.com/security/advisories?name=MDVSA-2013:074
- http://drupal.org/SA-CORE-2012-004
- http://www.securityfocus.com/bid/56993
- http://drupalcode.org/project/drupal.git/commitdiff/b47f95d
- http://www.osvdb.org/88528
- http://www.debian.org/security/2013/dsa-2776
- https://exchange.xforce.ibmcloud.com/vulnerabilities/80792
- http://www.openwall.com/lists/oss-security/2012/12/20/1