drupal6-cck

Page content
  • Author: Miklos Vajna
  • Vulnerable: 6.x_2.1-1
  • Unaffected: 6.x_2.2-1anacreon1

A security issue has been reported in the CCK Field Privacy module for Drupal, which can be exploited by malicious people to bypass certain security restrictions. The security issue is caused due to the application not properly restricting access to certain administrative pages and can be exploited to e.g. change permissions on fields.

CVEs: