CVE-2011-0899

Name of the Vulnerable Software and Affected Versions Drupal AES encryption module version 7.x-1.4

Description The issue allows remote attackers to gain privileges as the last logged-in user due to certain debugging code being left enabled in the release, which records the plaintext password of that user.

Recommendations For version 7.x-1.4, consider disabling the debugging code in the AES encryption module as a temporary workaround until a patch is available.