Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Drupal Credentials Management Errors Vulnerability - CVE-2009-2374 - Vulnerability Database
Drupal

Drupal Credentials Management Errors Vulnerability - CVE-2009-2374

Medium
Reference: CVE-2009-2374
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2009-2374
Title: Drupal Credentials Management Errors Vulnerability
Overview:

Drupal 5.x before 5.19 and 6.x before 6.13 does not properly sanitize failed login attempts for pages that contain a sortable table which includes the username and password in links that can be read from (1) the HTTP referer header of external web sites that are visited from those links or (2) when page caching is enabled the Drupal page cache.