CVE-2013-4226

MEDIUM

Authenticated User Page Caching < 7.x-1.5 - Unauthorized Information Disclosure via Cached Pages

Title source: llm
STIX 2.1

Description

The Authenticated User Page Caching (Authcache) module 7.x-1.x before 7.x-1.5 for Drupal does not properly restrict access to cached pages, which allows remote attackers with the same role-combination as the superuser to obtain sensitive information via the cached pages of the superuser.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://drupal.org/node/2059589
Mailing List, Third Party Advisory x_refsource_misc
http://www.openwall.com/lists/oss-security/2013/08/10/1
Release Notes, Vendor Advisory x_refsource_misc
https://drupal.org/node/2058165

Scores

CVSS v3 6.5
EPSS 0.0024
EPSS Percentile 46.3%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-862
Status published
Products (6)
drupal/authenticated_user_page_caching 7.x-1.0
drupal/authenticated_user_page_caching 7.x-1.1
drupal/authenticated_user_page_caching 7.x-1.2
drupal/authenticated_user_page_caching 7.x-1.3
drupal/authenticated_user_page_caching 7.x-1.4
drupal/authenticated_user_page_caching 7.x-1.5
Published Feb 18, 2020
Tracked Since Feb 18, 2026