Drupal.Core.Information.Disclosure.Vuln.SA-CORE-2014-002

description-logoDescription

Drupal is an open source content management software.
Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors. (CVE-2014-2983)

affected-products-logoAffected Products

Drupal 6.x before 6.31
Drupal 7.x before 7.27

Impact logoImpact

The vulnerability would allow remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.

recomended-action-logoRecommended Actions

Please download and apply patches as instructed in https://drupal.org/SA-CORE-2014-002 .

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)