CVE-2009-3782: Infoleak
Unspecified vulnerability in Userpoints 6.x before 6.x-1.1, a module for Drupal, allows remote authenticated users with "View own userpoints" permissions to read the userpoint data of arbitrary users via unknown attack vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3782?
CVE-2009-3782 is considered a moderate severity vulnerability affecting the Userpoints module for Drupal.
How do I fix CVE-2009-3782?
To fix CVE-2009-3782, you should upgrade the Userpoints module to version 6.x-1.1 or later.
Who is affected by CVE-2009-3782?
CVE-2009-3782 affects remote authenticated users with 'View own userpoints' permissions on affected Drupal installations.
What type of vulnerability is CVE-2009-3782?
CVE-2009-3782 is an information disclosure vulnerability that allows users to read the userpoint data of arbitrary users.
What versions of the Userpoints module are vulnerable to CVE-2009-3782?
Versions 6.x-1.0 and 6.x-1.x-dev of the Userpoints module are vulnerable to CVE-2009-3782.