Eric Smith

**Name of the Vulnerable Software and Affected Versions** Drupal OpenID Connect / OAuth client versions prior to 1.5.0 **Description** A flaw exists in the OpenID Connect / OAuth client module that allows for privilege escalation due to improper handling of case sensitivity. The module does not adequately validate the uniqueness of user fields, potentially allowing a user to register with an email address already associated with another account. This can lead to data integrity issues when a user signs in for the first time. **Recommendations** Update to version 1.5.0 or later.

**Name of the Vulnerable Software and Affected Versions** Configuration Split versions 0.0.0 through 1.9.x Configuration Split versions 2.0.0 through 2.0.1 **Description** A Cross-Site Request Forgery (CSRF) issue affects the Configuration Split module, allowing unauthorized actions to be performed. This issue may be exploited to perform actions on behalf of another user without their knowledge or consent. **Recommendations** For Configuration Split versions 0.0.0 through 1.9.x, update to version 1.10.0 or later. For Configuration Split versions 2.0.0 through 2.0.1, update to version 2.0.2 or later.

**Name of the Vulnerable Software and Affected Versions** Cisco IOS versions prior to 12.3-7-JA2 on Aironet Wireless Access Points (WAP) **Description** The issue allows remote authenticated users to cause a denial of service by sending a large number of spoofed ARP packets to the management interface, which creates a large ARP table and exhausts memory. **Recommendations** For versions prior to 12.3-7-JA2, update to version 12.3-7-JA2 or later to resolve the issue. As a temporary workaround, consider restricting access to the management interface to minimize the risk of exploitation.