NopSec.com uses cookies to make interactions with the Company’s Websites easy and meaningful. When you visit one of the Company’s Websites, NopSec.com’s servers send a cookie to your computer. Standing alone, cookies do not personally identify you; they merely recognize your Web browser. Unless you choose to identify yourself to NopSec.com, either by responding to a promotional offer, opening an account, or filling out a Web form (such as a “Contact Us” or a “Free Trial” Web form), you remain anonymous to the Company. Please go to our privacy statement for details.

Acknowledge
More Menu Less Menu
Schedule a Demo
Security Team Intelligence

Trending CVEs for the Week of July 22nd, 2019

Why IAM Technology is Critical to Your Vulnerability Management Program

CVE-2019-6342 – Drupal Core Access Bypass Vulnerability

Description 

According to its self-reported version, in Drupal 8.7.4, when the experimental Workspaces module is enabled, an access bypass condition is created. 

Affected Products

  • Drupal 8.7.4

Drupal 8.7.3 and earlier, Drupal 8.6.x and earlier, and Drupal 7.x are not affected

Exploitation and Risk

Currently, we are not aware of any working exploits.

Fixes

Upgrade to Drupal version 8.7.5 or later.

References

Drupal Security advisories

Categories
Category
Tags
Verizon 2020 DBIR Report, Vulnerability management
Read Next

Schedule a Product Demo Today!

See how NopSec's security insights and cyber threat exposure management platform can organize your security chaos.