Drupal Core DRUPAL-SA-CORE-2018-006 Multiple Security Vulnerabilities
BID:105657
Info
Drupal Core DRUPAL-SA-CORE-2018-006 Multiple Security Vulnerabilities
| Bugtraq ID: | 105657 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 17 2018 12:00AM |
| Updated: | Oct 17 2018 12:00AM |
| Credit: | Roland Kovacsics, Attilatilman, Dyates, Brian Osborne , Damien Tournoud , Nick Booher |
| Vulnerable: |
Drupal Drupal 8.0 Drupal Drupal 7.0 |
| Not Vulnerable: | |
Discussion
Drupal Core DRUPAL-SA-CORE-2018-006 Multiple Security Vulnerabilities
Drupal is prone to multiple security vulnerabilities.
An attacker can exploit these issues to execute arbitrary code in the context of the application, obtain sensitive information, bypass certain security restrictions and perform unauthorized actions. This may allow an attacker to perform phishing attacks by presenting false information that may appear to be legitimate application pages.
Drupal core 7.x versions prior to 8.x are vulnerable.
Drupal is prone to multiple security vulnerabilities.
An attacker can exploit these issues to execute arbitrary code in the context of the application, obtain sensitive information, bypass certain security restrictions and perform unauthorized actions. This may allow an attacker to perform phishing attacks by presenting false information that may appear to be legitimate application pages.
Drupal core 7.x versions prior to 8.x are vulnerable.
Solution / Fix
Drupal Core DRUPAL-SA-CORE-2018-006 Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.