CVE-2011-0899

The CVE-2011-0899 entry concerns the Drupal AES Encryption Module (7.x-1.4). The vulnerability arises because debugging code was left enabled in the release, which records the plaintext password of the last logged-in user. This misstep allows remote attackers to gain privileges as that user. The ...