Description (CNA)
Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.debian.org/security/2014/dsa-2913
- https://drupal.org/SA-CORE-2014-002
- http://www.debian.org/security/2014/dsa-2914
- http://www.openwall.com/lists/oss-security/2014/04/22/2
ADP enrichment
No English description supplied.