PT-2016-7968 · Drupal · Drupal

Publicado 2016-07-08 · Atualizado 2016-07-08

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Drupal (affected versions not specified)

Description A security issue exists in the User module of Drupal. If specific contributed or custom code triggers a rebuild of the user profile form, a registered user can be granted all user roles on the site, potentially resulting in the user gaining administrative access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

MGASA-2016-0245

Produtos afetados

Drupal

Referências · 6

• https://osv.dev/vulnerability/MGASA-2016-0245 · Aviso do Fabricante
• https://drupal.org/drupal-7.44-release-notes · Nota
• https://bugs.mageia.org/show_bug.cgi?id=18806 · Nota
• https://advisories.mageia.org/MGASA-2016-0245.html · Nota de Segurança
• https://drupal.org/drupal-7.44 · Nota
• https://drupal.org/SA-CORE-2016-002 · Nota