Beveiligingsadvies

CVE-2014-8735

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-11-12 16:00:00
Laatst bijgewerkt 2024-09-17 00:31:44
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" permission to obtain sensitive information by reading a log file.