CVE-2013-1925: Undefined Security Weakness

The Chaos Tool Suite ctools module 7.x-1.x before 7.x-1.3 for Drupal does not properly restrict node access, which allows remote authenticated users with the "access content" permission to read restricted node titles via an autocomplete list...

PT-2013-3473

Name of the Vulnerable Software and Affected Versions The Chaos Tool Suite ctools module versions 7.x-1.x through 7.x-1.2 Description The issue allows remote authenticated users with the access content permission to read restricted node titles via an autocomplete list, due to improper restriction...