Drupal Fast Permissions Administration Module Access Bypass Vulnerability

Bugtraq ID:	60808
Class:	Access Validation Error
CVE:	CVE-2013-2247
Remote:	Yes
Local:	No
Published:	Jun 26 2013 12:00AM
Updated:	Jul 08 2013 07:12AM
Credit:	Philip Boden
Vulnerable:
Not Vulnerable:

Drupal Fast Permissions Administration Module Access Bypass Vulnerability

The Fast Permissions Administration for Drupal is prone to an access-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions.

The following are affected:

Fast Permissions Administration 6.x-2.x versions prior to 6.x-2.5
Fast Permissions Administration 7.x-2.x versions prior to 7.x-2.3

Drupal Fast Permissions Administration Module Access Bypass Vulnerability

Attackers can use a browser to exploit this issue.

Drupal Fast Permissions Administration Module Access Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Drupal Fast Permissions Administration Module Access Bypass Vulnerability

References:

• Drupal Homepage (Drupal)