Actu
Vigil@nce - Drupal Ubercart: information disclosure via Order History
September 2014 by Vigil@nce
This bulletin was written by Vigil@nce : http://vigilance.fr/offer
SYNTHESIS OF THE VULNERABILITY
An attacker can read the Order History of Drupal Ubercart, in
order to obtain sensitive information.
– Impacted products: Drupal Modules
– Severity: 2/4
– Creation date: 11/09/2014
DESCRIPTION OF THE VULNERABILITY
The Ubercart module can be installed on Drupal.
However, an attacker can bypass access restrictions to the Order
History.
An attacker can therefore read the Order History of Drupal
Ubercart, in order to obtain sensitive information.
ACCESS TO THE COMPLETE VIGIL@NCE BULLETIN
http://vigilance.fr/vulnerability/Drupal-Ubercart-information-disclosure-via-Order-History-15334
