SB2016092006 - Access bypass in Drupal Drupal
Published: September 20, 2016
Security Bulletin ID
SB2016092006
CSH Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 vulnerability.
1) Access bypass (CVE-ID: N/A)
The vulnerability allows a remote user to access potentially sensitive information and functionality with no permission.The weakness exists due to access control error that allows a malicious user to obtain data or pages not allowed to view or read.
Successful exploitation of the vulnerability may lead to user's possibility to look over the data and perform unallowed activity.
Remediation
Install update from vendor's website.