drupal

• Vulnerable: 5.7-1
• Unaffected: 5.9-1kalgan1

A vulnerability has been reported in Drupal, which can be exploited by malicious people to conduct session fixation attacks. An error in the handling of certain sessions can be exploited to hijack another user’s session by tricking the user into logging in after following a specially crafted link.

• Bug Tracker URL: http://bugs.frugalware.org/task/3256

CVEs:

• There is no CVE for this issue, see http://drupal.org/node/286417