CVE-2014-2983
Published: 23 April 2014
Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.
Notes
| Author | Note |
|---|---|
| seth-arnold | See Drupal's advisory, changes to hosted applications may be necessary |
Priority
Status
| Package | Release | Status |
|---|---|---|
|
drupal6 Launchpad, Ubuntu, Debian |
artful |
Does not exist
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lucid |
Ignored
(end of life)
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| precise |
Ignored
(end of life)
|
|
| quantal |
Ignored
(end of life)
|
|
| saucy |
Does not exist
|
|
| trusty |
Does not exist
|
|
| upstream |
Released
(6.31)
|
|
| utopic |
Does not exist
|
|
| vivid |
Does not exist
|
|
| wily |
Does not exist
|
|
| xenial |
Does not exist
|
|
| yakkety |
Does not exist
|
|
| zesty |
Does not exist
|
|
|
drupal7 Launchpad, Ubuntu, Debian |
artful |
Not vulnerable
(7.27+dfsg2-2)
|
| bionic |
Does not exist
|
|
| cosmic |
Does not exist
|
|
| disco |
Does not exist
|
|
| focal |
Does not exist
|
|
| jammy |
Does not exist
|
|
| kinetic |
Does not exist
|
|
| lucid |
Does not exist
|
|
| lunar |
Does not exist
|
|
| mantic |
Does not exist
|
|
| precise |
Ignored
(end of life)
|
|
| quantal |
Ignored
(end of life)
|
|
| saucy |
Ignored
(end of life)
|
|
| trusty |
Needed
|
|
| upstream |
Released
(7.27-1)
|
|
| utopic |
Not vulnerable
(7.27+dfsg2-2)
|
|
| vivid |
Not vulnerable
(7.27+dfsg2-2)
|
|
| wily |
Not vulnerable
(7.27+dfsg2-2)
|
|
| xenial |
Not vulnerable
(7.27+dfsg2-2)
|
|
| yakkety |
Not vulnerable
(7.27+dfsg2-2)
|
|
| zesty |
Not vulnerable
(7.27+dfsg2-2)
|