The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended login access rules and successfully login via unknown vectors.
2008-10-29T15:31:35.557
2025-04-09T00:30:58.490
Deferred
CVSSv2: 6.0 (MEDIUM)
AV:N/AC:M/Au:S/C:P/I:P/A:P
6.8
6.4
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | drupal | drupal | < 5.11 | Yes |
Application | drupal | drupal | < 6.5 | Yes |