SB2016092126 - Security bypass in Drupal Drupal
Published: September 21, 2016
Security Bulletin ID
SB2016092126
Severity
Low
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Security bypass (CVE-ID: N/A)
The vulnerability may make the system accessible to all users.The weakness exists due to improper access control. In case of using menu.module for a menu item creation, a malicious user will be able to obtain any page you point to.
Successfull exploitation of the vulnerability may allow attacker to access the vulnerable system.
Remediation
Install update from vendor's website.