CVE-2008-4791

Description

The user module in Drupal 5.x before 5.11 and 6.x before 6.5 might allow remote authenticated users to bypass intended login access rules and successfully login via unknown vectors.

Affected Platforms

Weakness Type

CWE-264

References

• http://drupal.org/node/318706
• http://secunia.com/advisories/32201
• http://www.openwall.com/lists/oss-security/2008/10/21/7
• https://exchange.xforce.ibmcloud.com/vulnerabilities/45766
• http://drupal.org/node/318706
• http://secunia.com/advisories/32201