First published: Thu Dec 14 2006(Updated: )
The Chatroom Module before 4.7.x.-1.0 for Drupal displays private messages in a chatroom's last messages overview, which allows remote attackers to obtain sensitive information by reading the overview.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Drupal Chatroom Module | =4.7 | |
=4.7 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2006-6529 is classified as a moderate severity vulnerability due to the potential for exposing sensitive information.
To fix CVE-2006-6529, update the Drupal Chatroom Module to version 4.7.x-1.0 or later.
CVE-2006-6529 affects the Chatroom Module for Drupal versions prior to 4.7.x-1.0.
CVE-2006-6529 allows attackers to read private messages that are displayed in the chatroom's last messages overview.
There is no official workaround for CVE-2006-6529, making an upgrade to the latest version the best option.