Skip to content
OpenAdvisories
Unscored CVE-2013-4226 EUVD-2013-4130GHSA-2gh6-8p4x-h863

The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages,…

Published Feb 18, 2020 · Updated Aug 6, 2024 · Assigned by redhat

Description

The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages, which allows remote attackers with the same role-combination as the superuser to obtain sensitive information via the cached pages of the superuser.

Affected products

VendorProductAffectedFixed
— Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 —

References