CVE-2015-5491

The Dynamic display block module 7.x-1.x before 7.x-1.1 for Drupal allows remote authenticated users to bypass intended access restrictions and read sensitive titles by leveraging the "administer ddblock" permission...

CVE-2015-5491

CVE-2015-5491 concerns the Drupal module Dynamic display block (7.x-1.x) , where versions prior to 7.x-1.1 allow remote authenticated users with the administer ddblock permission to bypass access restrictions and read titles of restricted content. The root cause is improper access control in the ...