Description
The login redirection mechanism in the Drupal 4.7 Pubcookie module before 1.2.2.4 2006/09/06 and the Drupal 4.6 Pubcookie module before 1.6.2.1 2006/09/07 allows remote attackers to bypass authentication requirements and spoof identities of arbitrary users via unspecified vectors.
References
- 19920 vdb-entry
- ADV-2006-3530 vdb-entry
- 21811 third-party-advisory
- http://drupal.org/node/83064
- 28623 vdb-entry