Description
The Relevant Content module 5.x before 5.x-1.4 and 6.x before 6.x-1.5 for Drupal does not properly implement node access logic, which allows remote attackers to discover restricted node titles and relationships.
References
- http://drupal.org/node/975094
- relevantcontent-nodeaccess-info-disc(63331) vdb-entry
- 69368 vdb-entry
- 42228 third-party-advisory
- http://drupal.org/node/974668
- 44932 vdb-entry
- http://drupal.org/node/974672