Drupal Open Atrium Module Multiple Remote Security Vulnerabilities
BID:71783
Info
Drupal Open Atrium Module Multiple Remote Security Vulnerabilities
| Bugtraq ID: | 71783 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 17 2014 12:00AM |
| Updated: | Dec 17 2014 12:00AM |
| Credit: | Hunter Fox of the Drupal Security Team & an Open Atrium maintainer, and Pere Orga. |
| Vulnerable: |
Drupal Open Atrium 7.x-2.25 Drupal Open Atrium 7.x-2.22 Drupal Open Atrium 7.x-2.21 Drupal Open Atrium 7.x-2.0 |
| Not Vulnerable: |
Drupal Open Atrium 7.x-2.26 |
Discussion
Drupal Open Atrium Module Multiple Remote Security Vulnerabilities
The Open Atrium module for Drupal is prone to multiple cross-site request-forgery vulnerabilities, multiple access security-bypass vulnerabilities, and multiple security-bypass vulnerabilities.
An attacker may leverage these issues to perform unauthorized actions in the context of a user's session, bypass security restrictions or gain unauthorized access. This may aid in other attacks.
Open Atrium 7.x-2.x versions prior to 7.x-2.26 are vulnerable.
The Open Atrium module for Drupal is prone to multiple cross-site request-forgery vulnerabilities, multiple access security-bypass vulnerabilities, and multiple security-bypass vulnerabilities.
An attacker may leverage these issues to perform unauthorized actions in the context of a user's session, bypass security restrictions or gain unauthorized access. This may aid in other attacks.
Open Atrium 7.x-2.x versions prior to 7.x-2.26 are vulnerable.
Solution / Fix
Drupal Open Atrium Module Multiple Remote Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.