Improper access control in User module in Drupal - CVE-2016-6211
Published: August 27, 2016
Vulnerability identifier: #VU347
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2016-6211
CWE-ID: CWE-264
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Vendor: Drupal
Affected software:
Drupal
Drupal
Detailed vulnerability description
The vulnerability allows a remote attacker to gain complete control over vulnerable website.
The vulnerability exists due to unspecified error in User module, caused by some specific contributed or custom code, which triggers a rebuild of the user profile form. A remote attacker can be granted all user roles while updating his profile and gain administrative access to vulnerable website.
Successful exploitation of this vulnerability may allow an attacker to gain full access to vulnerable website, however requires contributed or custom code that performs a form rebuild during submission of the user profile form.
How to mitigate CVE-2016-6211
Install the latest version 7.44:
https://www.drupal.org/project/drupal/releases/7.44
https://www.drupal.org/project/drupal/releases/7.44