Drupal Require Login Module Front Page Access Bypass Vulnerability
BID:67564
Info
Drupal Require Login Module Front Page Access Bypass Vulnerability
| Bugtraq ID: | 67564 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 21 2014 12:00AM |
| Updated: | May 21 2014 12:00AM |
| Credit: | Eelke Blok |
| Vulnerable: |
Drupal Require Login 7.x-1.0 |
| Not Vulnerable: |
Drupal Require Login 7.x-1.1 |
Discussion
Drupal Require Login Module Front Page Access Bypass Vulnerability
The Require Login module for Drupal is prone to an access-bypass vulnerabilities.
An attacker can leverage this issue to obtain sensitive information and perform unauthorized actions.
Require Login 7.x-1.x versions prior to 7.x-1.1 is vulnerable.
The Require Login module for Drupal is prone to an access-bypass vulnerabilities.
An attacker can leverage this issue to obtain sensitive information and perform unauthorized actions.
Require Login 7.x-1.x versions prior to 7.x-1.1 is vulnerable.
Exploit / POC
Drupal Require Login Module Front Page Access Bypass Vulnerability
An attacker can exploit this issue by using a web browser.
An attacker can exploit this issue by using a web browser.