CVE-2008-4791: Medium severity drupal vulnerability
Published Oct 29, 2008
·Updated
The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended login access rules and successfully login via unknown vectors.
Affected Software
2 affected components
Drupal Drupal>=5.0<5.11
Drupal Drupal>=6.0<6.5
Remediation
Patch Available
Event History
Oct 29, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-4791?
CVE-2008-4791 is classified as a medium severity vulnerability, allowing potential unauthorized access.
2
How do I fix CVE-2008-4791?
To fix CVE-2008-4791, upgrade your Drupal installation to at least version 5.11 for Drupal 5.x or 6.5 for Drupal 6.x.
3
Who is affected by CVE-2008-4791?
CVE-2008-4791 affects users of Drupal versions 5.x prior to 5.11 and 6.x prior to 6.5.
4
What impact does CVE-2008-4791 have on my Drupal site?
CVE-2008-4791 can allow remote authenticated users to bypass login restrictions, potentially compromising user accounts.
5
Is CVE-2008-4791 a remote code execution vulnerability?
CVE-2008-4791 is not a remote code execution vulnerability but rather allows unauthorized login access.