Drupal Push Notifications Module Information Disclosure Vulnerability
BID:65359
Info
Drupal Push Notifications Module Information Disclosure Vulnerability
| Bugtraq ID: | 65359 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 05 2014 12:00AM |
| Updated: | Feb 05 2014 12:00AM |
| Credit: | Graham Bates of the Drupal Security Team |
| Vulnerable: |
Drupal Push Notifications 7.x-1.0 |
| Not Vulnerable: |
Drupal Push Notifications 7.x-1.1 |
Discussion
Drupal Push Notifications Module Information Disclosure Vulnerability
The Push Notifications module for Drupal is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
Push Notifications 7.x-1.x versions prior to 7.x-1.1 are vulnerable
The Push Notifications module for Drupal is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.
Push Notifications 7.x-1.x versions prior to 7.x-1.1 are vulnerable
Exploit / POC
Drupal Push Notifications Module Information Disclosure Vulnerability
Attackers can use a browser to exploit this issue.
Attackers can use a browser to exploit this issue.