CVE-2013-2247: High severity fast permissions administration vulnerability
The Fast Permissions Administration module 6.x-2.x before 6.x-2.5 and 7.x-2.x before 7.x-2.3 for Drupal does not properly restrict access to the modal content callback, which allows remote attackers to obtain unspecified access to the permissions edit form.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2013-2247?
CVE-2013-2247 is considered a moderate severity vulnerability due to improper access restrictions.
How do I fix CVE-2013-2247?
To fix CVE-2013-2247, update the Fast Permissions Administration module to version 6.x-2.5 or 7.x-2.3 or higher.
Which versions are affected by CVE-2013-2247?
CVE-2013-2247 affects Fast Permissions Administration module versions 6.x-2.0 to 6.x-2.4 and 7.x-2.0 to 7.x-2.2.
What type of attack is possible with CVE-2013-2247?
CVE-2013-2247 allows remote attackers to gain unauthorized access to the permissions edit form.
Is there a workaround for CVE-2013-2247?
There is no official workaround for CVE-2013-2247; the recommended action is to update to a patched version.