CVE-2012-2720

The CVE-2012-2720 entry applies to the Drupal Token Authentication module (tokenauth) in 6.x-1.x prior to 6.x-1.7. The underlying issue is that sessions are not properly reverted, which could allow remote attackers to perform requests with extra privileges. Affected component: Tokenauth 6.x-1.x (...