Drupal Context Module CVE-2013-4445 Module Access Bypass Vulnerability
BID:63231
Info
Drupal Context Module CVE-2013-4445 Module Access Bypass Vulnerability
| Bugtraq ID: | 63231 |
| Class: | Access Validation Error |
| CVE: |
CVE-2013-4445 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 16 2013 12:00AM |
| Updated: | Apr 13 2015 09:50PM |
| Credit: | Heine of the Drupal Security Team |
| Vulnerable: |
Drupal Context 7.x-3.0-beta6 Drupal Context 7.x-3.0-beta5 Drupal Context 6.X-3.1 Drupal Context 6.x-3.0 |
| Not Vulnerable: |
Drupal Context 7.x-3.0 Drupal Context 6.X-3.2 |
Exploit / POC
Drupal Context Module CVE-2013-4445 Module Access Bypass Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Drupal Context Module CVE-2013-4445 Module Access Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Drupal Context 7.x-3.0-beta5
Drupal Context 6.x-3.0
Drupal Context 6.X-3.1
Drupal Context 7.x-3.0-beta6
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Drupal Context 7.x-3.0-beta5
-
Drupal context 7.x-3.0
https://drupal.org/node/2112785
Drupal Context 6.x-3.0
-
Drupal context 6.x-3.2
https://drupal.org/node/2112791
Drupal Context 6.X-3.1
-
Drupal context 6.x-3.2
https://drupal.org/node/2112791
Drupal Context 7.x-3.0-beta6
-
Drupal context 7.x-3.0
https://drupal.org/node/2112785