Drupal Bad Behavior Module Information Disclosure Vulnerability

Bugtraq ID:	70795
Class:	Design Error
CVE:	CVE-2014-8735
Remote:	Yes
Local:	No
Published:	Oct 22 2014 12:00AM
Updated:	Nov 14 2014 12:58AM
Credit:	Hugh Wormington
Vulnerable:
Not Vulnerable:

Drupal Bad Behavior Module Information Disclosure Vulnerability

The Bad Behavior module for Drupal is prone to an information-disclosure vulnerability.

Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks.

The following versions are vulnerable:

Bad Behavior 6.x-2.x versions prior to 6.x-2.2216.
Bad Behavior 7.x-2.x versions prior to 7.x-2.2216.

Drupal Bad Behavior Module Information Disclosure Vulnerability

Attackers can use a browser to exploit this issue.

Drupal Bad Behavior Module Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Drupal Bad Behavior Module Information Disclosure Vulnerability

References:

• Drupal Homepage (Drupal)