Drupal Secure Cookie Data Module Authentication Bypass Vulnerability
BID:65079
Info
Drupal Secure Cookie Data Module Authentication Bypass Vulnerability
| Bugtraq ID: | 65079 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 22 2014 12:00AM |
| Updated: | Jan 22 2014 12:00AM |
| Credit: | Heine Deelstra |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Drupal Secure Cookie Data Module Authentication Bypass Vulnerability
The Secure Cookie Data module for Drupal is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may aid in further attacks.
Secure Cookie Data 7.x-2.x versions prior to 7.x-2.1 are vulnerable.
The Secure Cookie Data module for Drupal is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. This may aid in further attacks.
Secure Cookie Data 7.x-2.x versions prior to 7.x-2.1 are vulnerable.
Exploit / POC
Drupal Secure Cookie Data Module Authentication Bypass Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Drupal Secure Cookie Data Module Authentication Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Drupal Secure Cookie Data Module Authentication Bypass Vulnerability
References:
References:
- Drupal Homepage (Drupal)