Drupal Certify Module Access Bypass and Information Disclosure Vulnerabilities
BID:74282
Info
Drupal Certify Module Access Bypass and Information Disclosure Vulnerabilities
| Bugtraq ID: | 74282 |
| Class: | Unknown |
| CVE: |
CVE-2015-3404 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 28 2015 12:00AM |
| Updated: | May 07 2015 06:08PM |
| Credit: | Jim Gauthier |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Drupal Certify Module Access Bypass and Information Disclosure Vulnerabilities
The Certify module for Drupal is prone to an access-bypass vulnerability and an information-disclosure vulnerability.
An attacker can leverage these issues to bypass certain security restrictions and gain access to sensitive information. Other attacks are possible.
The Certify module for Drupal is prone to an access-bypass vulnerability and an information-disclosure vulnerability.
An attacker can leverage these issues to bypass certain security restrictions and gain access to sensitive information. Other attacks are possible.
Exploit / POC
Drupal Certify Module Access Bypass and Information Disclosure Vulnerabilities
An attacker can exploit these issues using a web browser.
An attacker can exploit these issues using a web browser.
Solution / Fix
Drupal Certify Module Access Bypass and Information Disclosure Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.