Description
Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.
No analysis available yet.
Remediation
No remediation available yet.
Tracking
Sign in to view the affected projects.
Advisories
| Source | ID | Title |
|---|---|---|
Debian DSA |
DSA-2776-1 | drupal6 security update |
EUVD |
EUVD-2012-5535 | Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results. |
References
History
No history.
Status: PUBLISHED
Assigner: redhat
Published:
Updated: 2024-08-06T21:14:16.352Z
Reserved: 2012-10-24T00:00:00.000Z
Link: CVE-2012-5651
No data.
Status : Deferred
Published: 2013-01-03T01:55:03.373
Modified: 2025-04-11T00:51:21.963
Link: CVE-2012-5651
No data.
OpenCVE Enrichment
No data.
Weaknesses
Debian DSA
EUVD