RETIRED: Drupal Quiz Module Multiple Access Bypass Vulnerabilities

Bugtraq ID:	63452
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 30 2013 12:00AM
Updated:	Nov 21 2013 12:54AM
Credit:	nirvanajyothi and Cat Hirst
Vulnerable:	Drupal Quiz 6.x-4.3
Not Vulnerable:

RETIRED: Drupal Quiz Module Multiple Access Bypass Vulnerabilities

The Quiz module for Drupal is prone to multiple access-bypass vulnerabilities.

Successfully exploiting these issues may allow an attacker to bypass certain security restrictions and perform unauthorized actions.

Quiz 6.x-4.x versions prior to 6.x-4.5 are vulnerable.

This BID is being retired. The following individual records exist to better document the issues:

63797 Drupal Quiz Module Delete Quiz Access Bypass Vulnerability
63798 Drupal Quiz Module View Quiz Access Bypass Vulnerability

RETIRED: Drupal Quiz Module Multiple Access Bypass Vulnerabilities

An attacker can exploit these issues using a web browser.

RETIRED: Drupal Quiz Module Multiple Access Bypass Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

RETIRED: Drupal Quiz Module Multiple Access Bypass Vulnerabilities

References:

• Drupal Homepage (Drupal)