Vulnerability Bulletins

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-002

Affected software	Drupal

Advisory ID: DRUPAL-SA-CORE-2016-002Project: Drupal core Version: 7.x, 8.xDate: 2016-June-15Security risk: 11/25 ( Moderately Critical) AC:Basic/A:None/CI:Some/II:None/E:Theoretical/TD:UncommonVulnerability: Access bypass, Multiple vulnerabilitiesDescriptionSaving user accounts can sometimes grant the user all roles (User module - Drupal 7 - Moderately Critical)A vulnerability exists in the User module, where if some specific contributed or custom code triggers a rebuild of the user profile More info: https://www.drupal.org/SA-CORE-2016-002

Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2016-002