Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use Drupal Google Analytics, in order to obtain
sensitive information.

Impacted products: Drupal Modules

Severity: 2/4

Creation date: 11/12/2014

DESCRIPTION OF THE VULNERABILITY

The Google Analytics module can be installed on Drupal.

However, an attacker can read the salt used by hashing features.

An attacker can therefore use Drupal Google Analytics, in order to
obtain sensitive information.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Drupal-Google-Analytics-information-disclosure-15776