CVE-2012-1649

CVE-2012-1649 affects the Drupal Cool Aid module prior to 6.x-1.9. The vulnerability is an access-control bypass that allows remote authenticated users with the administer coolaid permission to modify arbitrary pages via unspecified vectors. The root cause is insufficient access restriction enfor...