Drupal Quick Tabs Module Access Bypass Vulnerability

Bugtraq ID:	62774
Class:	Access Validation Error
CVE:	CVE-2013-4406
Remote:	Yes
Local:	No
Published:	Oct 02 2013 12:00AM
Updated:	Oct 09 2013 01:05AM
Credit:	Steven Wiliam
Vulnerable:	Katherine Bailey Quick Tabs 7.x-3.3 Katherine Bailey Quick Tabs 7.x-3.2 Katherine Bailey Quick Tabs 7.x-3.1 Katherine Bailey Quick Tabs 6.X-3.1 Katherine Bailey Quick Tabs 6.X-3.0 Katherine Bailey Quick Tabs 6.X-2.1 Katherine Bailey Quick Tabs 6.X-2.0
Not Vulnerable:

Drupal Quick Tabs Module Access Bypass Vulnerability

The Quick Tabs module for Drupal is prone to an access-bypass vulnerability.

Successfully exploiting this issue may allow an attacker to bypass certain security restrictions and perform unauthorized actions.

The following versions are affected:

Quick Tabs 7.x-3.x versions prior to 7.x-3.6
Quick Tabs 6.x-3.x versions prior to 6.x-3.2
Quick Tabs 6.x-2.x versions prior to 6.x-2.2

Drupal Quick Tabs Module Access Bypass Vulnerability

An attacker can exploit this issue using a web browser.

Drupal Quick Tabs Module Access Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Drupal Quick Tabs Module Access Bypass Vulnerability

References:

• Drupal Homepage (Drupal)
  
• Quick Tabs Homepage (Drupal)