CVE-2014-2983: Infoleak
First published: Wed Apr 23 2014(Updated: )
Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Drupal Drupal | >=6.0<6.31 | |
| Drupal Drupal | >=7.0<7.27 | |
| Debian Debian Linux | =6.0 | |
| Debian Debian Linux | =7.0 | |
| Debian Debian Linux | =8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/last-modified-date
- agent/remedy
- agent/softwarecombine
- agent/first-publish-date
- agent/description
- agent/event
- agent/type
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/drupal
- canonical/drupal drupal
- version/drupal drupal/6.0
- version/drupal drupal/7.0
- vendor/debian
- canonical/debian debian linux
- version/debian debian linux/6.0
- version/debian debian linux/7.0
- version/debian debian linux/8.0