Drupal Secure Pages Module HTTP Redirection Information Disclosure Vulnerability
BID:63573
Info
Drupal Secure Pages Module HTTP Redirection Information Disclosure Vulnerability
| Bugtraq ID: | 63573 |
| Class: | Design Error |
| CVE: |
CVE-2013-4595 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 06 2013 12:00AM |
| Updated: | Nov 19 2013 06:46AM |
| Credit: | Balazs Nagykekesi |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Drupal Secure Pages Module HTTP Redirection Information Disclosure Vulnerability
The Secure Pages module for Drupal is prone to an information-disclosure vulnerability.
Successfully exploiting this issue may allow attackers to obtain sensitive information by conducting a man-in-the-middle attack. This may lead to other attacks.
Secure Pages 6.x-2.x versions prior to 6.x-2.0 are vulnerable.
The Secure Pages module for Drupal is prone to an information-disclosure vulnerability.
Successfully exploiting this issue may allow attackers to obtain sensitive information by conducting a man-in-the-middle attack. This may lead to other attacks.
Secure Pages 6.x-2.x versions prior to 6.x-2.0 are vulnerable.
Exploit / POC
Drupal Secure Pages Module HTTP Redirection Information Disclosure Vulnerability
An attacker can exploit this issue using readily available tools.
An attacker can exploit this issue using readily available tools.
Solution / Fix
Drupal Secure Pages Module HTTP Redirection Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Drupal Secure Pages Module HTTP Redirection Information Disclosure Vulnerability
References:
References:
- Drupal Homepage (Drupal)