Drupal Password Policy Module Security Bypass and Information Disclosure Vulnerabilities
BID:68112
Info
Drupal Password Policy Module Security Bypass and Information Disclosure Vulnerabilities
| Bugtraq ID: | 68112 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 18 2014 12:00AM |
| Updated: | Jun 18 2014 12:00AM |
| Credit: | Ryan Courtnage and AohRveTPV |
| Vulnerable: |
Drupal Password Policy 7.x-1.6 Drupal Password Policy 7.x-1.5 Drupal Password Policy 7.x-1.4 Drupal Password Policy 7.x-1.3 Drupal Password Policy 7.x-1.0 Drupal Password Policy 6.X-1.6 Drupal Password Policy 6.X-1.5 Drupal Password Policy 6.X-1.4 Drupal Password Policy 6.X-1.0 |
| Not Vulnerable: |
Drupal Password Policy 7.x-2.0-alpha2 Drupal Password Policy 7.x-1.7 Drupal Password Policy 6.X-1.7 |
Discussion
Drupal Password Policy Module Security Bypass and Information Disclosure Vulnerabilities
Drupal Password Policy Module is prone to a security-bypass vulnerability and an information-disclosure vulnerability.
Successful attacks can allow an attacker to obtain sensitive information and bypass certain security restrictions.
Drupal Password Policy Module is prone to a security-bypass vulnerability and an information-disclosure vulnerability.
Successful attacks can allow an attacker to obtain sensitive information and bypass certain security restrictions.
Solution / Fix
Drupal Password Policy Module Security Bypass and Information Disclosure Vulnerabilities
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Drupal Password Policy Module Security Bypass and Information Disclosure Vulnerabilities
References:
References: