medium5.0
CVE-2014-2983
Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtai…
Impact
Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Drupal | from 6.0 before 6.31 from 7.0 before 7.27 |
| Debian | Debian Linux | Versions 6.0, 7.0, 8.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.debian.org/security/2014/dsa-2913
- http://www.debian.org/security/2014/dsa-2914
- http://www.openwall.com/lists/oss-security/2014/04/22/2
- https://drupal.org/SA-CORE-2014-002
- http://www.debian.org/security/2014/dsa-2913
- http://www.debian.org/security/2014/dsa-2914
- http://www.openwall.com/lists/oss-security/2014/04/22/2
- https://drupal.org/SA-CORE-2014-002