CVE-2010-2473

2019-11-0718:11:35

redhat

www.cve.org

0.001 Low

EPSS

Percentile

24.9%

JSON

Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked.

CNA Affected

[
  {
    "product": "drupal6",
    "vendor": "drupal6",
    "versions": [
      {
        "status": "affected",
        "version": "6.x before version 6.16"
      },
      {
        "status": "affected",
        "version": "5.x before version 5.22"
      }
    ]
  }
]