CVE-2013-4272

Name of the Vulnerable Software and Affected Versions BOTCHA Spam Prevention module versions 7.x-1.x through 7.x-1.5 BOTCHA Spam Prevention module versions 7.x-2.x through 7.x-2.0 BOTCHA Spam Prevention module versions 7.x-3.x through 7.x-3.2

Description The issue allows context-dependent users to obtain sensitive information, such as usernames and passwords, by reading the log file when the debugging level is set to 5 or 6. This occurs because the module logs the content of submitted forms.

Recommendations For BOTCHA Spam Prevention module versions 7.x-1.x through 7.x-1.5, update to version 7.x-1.6 or later. For BOTCHA Spam Prevention module versions 7.x-2.x through 7.x-2.0, update to version 7.x-2.1 or later. For BOTCHA Spam Prevention module versions 7.x-3.x through 7.x-3.2, update to version 7.x-3.3 or later.