CVE-2012-4486

Cross-site request forgery CSRF vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that switch the user to a subuser via unspecified vectors...

PT-2012-5432

Name of the Vulnerable Software and Affected Versions Drupal Subuser module versions prior to 6.x-1.8 Description A cross-site request forgery CSRF issue allows remote attackers to hijack the authentication of arbitrary users for requests that switch the user to a subuser. Recommendations For...