PT-2012-4210
CVE-2012-2720
·
تاريخ النشر
2012-06-27
·
تاريخ التحديث
2017-08-29
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Token Authentication (tokenauth) module versions 6.x-1.x before 6.x-1.7 for Drupal
Description
The issue is related to the Token Authentication module for Drupal, where it does not properly revert user sessions. This might allow remote attackers to perform requests with extra privileges.
Recommendations
For Token Authentication (tokenauth) module versions 6.x-1.x before 6.x-1.7, update to version 6.x-1.7 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾