Authentication flaw

2015-09-1716:59:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

58.5%

JSON

The RESTful module 7.x-1.x before 7.x-1.3 for Drupal does not properly cache pages of authenticated users when using non-cookie authentication providers, which allows remote attackers to obtain sensitive information via unspecified vectors.

CPENameOperatorVersion
restfuleq7.120.10
restfuleq7.120.11
restfuleq7.120.12

Name	Operator	Version
restful	eq	7.120.10
restful	eq	7.120.11
restful	eq	7.120.12

References

www.drupal.org/node/2565421

www.drupal.org/node/2565875