Freely subscribe to our NEWSLETTER

This bulletin was written by Vigil@nce : http://vigilance.fr/offer

SYNTHESIS OF THE VULNERABILITY

An attacker can use Drupal Views, in order to obtain sensitive
information.

Impacted products: Drupal Modules

Severity: 2/4

Creation date: 22/05/2014

DESCRIPTION OF THE VULNERABILITY

The Views module can be installed on Drupal.

However, an attacker can bypass access restrictions to data.

An attacker can therefore use Drupal Views, in order to obtain
sensitive information.

ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN

http://vigilance.fr/vulnerability/Drupal-Views-information-disclosure-14783