PT-2014-8960
CVE-2014-9361
·
تاريخ النشر
2014-12-10
·
تاريخ التحديث
2014-12-11
الوصف من
CVSS 2.0
4.3
متوسطةالمقاييسAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
LoginToboggan module versions 7.x-1.x before 7.x-1.4 for Drupal
Description
The issue allows remote attackers with the pre-authorized role to gain privileges and possibly obtain sensitive information by accessing a Page Not Found (404) page, due to the module not properly unsetting the authorized user role for certain users.
Recommendations
For LoginToboggan module versions 7.x-1.x before 7.x-1.4, update to version 7.x-1.4 or later to resolve the issue.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾