CVE-2013-4226
18.02.2020, 19:15
The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages, which allows remote attackers with the same role-combination as the superuser to obtain sensitive information via the cached pages of the superuser.Enginsight
| Vendor | Product | Version |
|---|---|---|
| drupal | authenticated_user_page_caching | 7.x-1.0:x |
| drupal | authenticated_user_page_caching | 7.x-1.1:x |
| drupal | authenticated_user_page_caching | 7.x-1.2:x |
| drupal | authenticated_user_page_caching | 7.x-1.3:x |
| drupal | authenticated_user_page_caching | 7.x-1.4:x |
| drupal | authenticated_user_page_caching | 7.x-1.5:x |
𝑥
= Vulnerable software versions
Common Weakness Enumeration