PT-2016-7968 · Drupal · Drupal

Published 2016-07-08 · Updated 2016-07-08

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions Drupal (affected versions not specified)

Description A security issue exists in the User module of Drupal. If specific contributed or custom code triggers a rebuild of the user profile form, a registered user can be granted all user roles on the site, potentially resulting in the user gaining administrative access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2016-0245

Affected Products

Drupal

References · 6

• https://osv.dev/vulnerability/MGASA-2016-0245 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0245.html · Security Note
• https://drupal.org/drupal-7.44-release-notes · Note
• https://bugs.mageia.org/show_bug.cgi?id=18806 · Note
• https://drupal.org/drupal-7.44 · Note
• https://drupal.org/SA-CORE-2016-002 · Note