CVE-2014-9024: High severity better protected pages vulnerability
Published Nov 20, 2014
·Updated
The Protected Pages module 7.x-2.x before 7.x-2.4 for Drupal allows remote attackers to bypass the password protection via a crafted path.
Affected Software
3 affected components
Protected Pages Project Protected Pages Drupal=7.x-1.0
Protected Pages Project Protected Pages Drupal=7.x-2.0
Protected Pages Project Protected Pages Drupal=7.x-2.2
Remediation
Patch Available
Event History
Nov 20, 2014
CVE Published
via MITRE·05:00 PM
Data Sourced
via MITRE·05:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2014-9024?
CVE-2014-9024 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2014-9024?
To fix CVE-2014-9024, upgrade to Protected Pages module version 7.x-2.4 or higher.
3
What systems are affected by CVE-2014-9024?
CVE-2014-9024 affects versions 7.x-1.0, 7.x-2.0, and 7.x-2.2 of the Protected Pages module for Drupal.
4
Can CVE-2014-9024 be exploited remotely?
Yes, CVE-2014-9024 allows remote attackers to bypass password protection through crafted paths.
5
Is CVE-2014-9024 publicly known?
Yes, CVE-2014-9024 is a publicly disclosed vulnerability that may be exploited by attackers.