boombatower Subuser module (subuser) for Drupal 6.x-1.3

CPE Details

boombatower Subuser module (subuser) for Drupal 6.x-1.3
boombatower
subuser
6.x-1.3
2012-11-05
13h29 +00:00
2012-11-13
22h52 +00:00
CPE NVD
Alerte pour un CPE
Restez informé de toutes modifications pour un CPE spécifique.
Gestion des notifications

CPE Name: cpe:2.3:a:boombatower:subuser:6.x-1.3:*:*:*:*:*:*:*

Informations

Vendor

boombatower

Product

subuser

Version

6.x-1.3

Related CVE

Open and find in CVE List

CVE ID Publié Description Score Gravité
CVE-2012-4486 2012-11-02 15h00 +00:00 Cross-site request forgery (CSRF) vulnerability in the Subuser module before 6.x-1.8 for Drupal allows remote attackers to hijack the authentication of arbitrary users for requests that switch the user to a subuser via unspecified vectors.
6.8
CVE-2012-4487 2012-11-02 15h00 +00:00 The Subuser module before 6.x-1.8 for Drupal does not properly check "switch subuser" permissions, which allows remote authenticated parent users to change their role by switching to a subuser they created.
4