CVE-2015-5491

CVE-2015-5491 concerns the Drupal module Dynamic display block (7.x-1.x) , where versions prior to 7.x-1.1 allow remote authenticated users with the administer ddblock permission to bypass access restrictions and read titles of restricted content. The root cause is improper access control in the ...

PT-2015-6943

Name of the Vulnerable Software and Affected Versions Dynamic display block module versions 7.x-1.x before 7.x-1.1 Description The issue allows remote authenticated users to bypass intended access restrictions and read sensitive titles by leveraging the administer ddblock permission...