Vulnerability Bulletins |
Drupal Core - Moderately Critical - Multiple Vulnerabilities - SA-CORE-2014-006 |
|
| Affected software | Drupal |
|
Advisory ID: DRUPAL-SA-CORE-2014-006Project: Drupal core Version: 6.x, 7.xDate: 2014-November-19Security risk: 14/25 ( Moderately Critical) AC:Basic/A:None/CI:Some/II:Some/E:Theoretical/TD:UncommonVulnerability: Multiple vulnerabilitiesDescriptionSession hijacking (Drupal 6 and 7)A specially crafted request can give a user access to another users session, allowing an attacker to hijack a random session.This attack is known to be possible on certain Drupal 7 sites which serve both HTTP and HTTPS More info: https://www.drupal.org/SA-CORE-2014-006 |
|