The Memcache module 5.x before 5.x-1.10 and 6.x before 6.x-1.6 for Drupal does not properly handle the $user object in memcache_admin, which might "lead to a role change not being recognized until the user logs in again."
References
Link | Resource |
---|---|
http://drupal.org/node/927016 | Patch Vendor Advisory |
http://secunia.com/advisories/41663 | Vendor Advisory |
http://drupal.org/node/926478 | Patch |
http://www.vupen.com/english/advisories/2010/2543 |
Configurations
Configuration 1 (hide)
AND |
|
Information
Published : 2012-10-07 13:55
Updated : 2012-10-08 14:19
NVD link : CVE-2010-5276
Mitre link : CVE-2010-5276
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
memcache_project
- memcache
drupal
- drupal