CVE-2010-2473

Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances

published November 7, 2019

CVSS
—
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01008 · 62.5th percentile
Published
2019-11-07T18:11Z
EPSS history
Timeline
  • 07 NOV 18:11Z
    Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances
    cvelistv5