Lucene search
PRIOn knowledge basePRION:CVE-2013-4445HistoryDec 07, 2013 - 8:55 p.m.
Design/Logic Flaw
2013-12-0720:55:00
PRIOn knowledge base
www.prio-n.com
2
The json rendering functionality in the Context module 6.x-2.x before 6.x-3.2 and 7.x-3.x before 7.x-3.0 for Drupal uses Drupal’s token scheme to restrict access to blocks, which makes it easier for remote authenticated users to guess the access token for a block by leveraging the token from a block to which the user has access.
References
Related
cve
cve
CVE-2013-4445
2013-12-07 20:55:02
cvelist
cvelist
CVE-2013-4445
2013-12-07 20:00:00
nvd
nvd
CVE-2013-4445
2013-12-07 20:55:02
nessus
nessus
Fedora 20 : drupal6-context-3.3-1.fc20 (2013-21303)
2013-11-25 00:00:00
Fedora 18 : drupal6-context-3.3-1.fc18 (2013-21298)
2013-11-25 00:00:00
Fedora 19 : drupal6-context-3.3-1.fc19 (2013-21231)
2013-11-25 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: drupal7-context-3.1-1.fc20
2013-11-13 02:01:27
[SECURITY] Fedora 19 Update: drupal6-context-3.3-1.fc19
2013-11-23 19:52:08
[SECURITY] Fedora 20 Update: drupal6-context-3.3-1.fc20
2013-11-24 03:32:46
openvas
openvas
Fedora Update for drupal7-context FEDORA-2013-20965
2013-11-21 00:00:00
Fedora Update for drupal6-context FEDORA-2013-21231
2013-11-26 00:00:00
Fedora Update for drupal7-context FEDORA-2013-20965
2013-11-21 00:00:00