CVE-2013-4598

https://notcve.org/view.php?id=CVE-2013-4598

The Groups, Communities and Co (GCC) module 7.x-1.x before 7.x-1.1 for Drupal does not properly check permission, which allows remote attackers to access the configuration pages via unspecified vectors. El módulo Groups, Communities And Co (GCC) 7.x-1.x anterior a 7.x-1.1 para Drupal no comprueba debidamente permiso, lo que permite a atacantes remotos acceder a las páginas de configuración a través de vectores no especificados. • http://secunia.com/advisories/55651 http://www.securityfocus.com/bid/63703 https://drupal.org/node/2132747 https://drupal.org/node/2135267 • CWE-264: Permissions, Privileges, and Access Controls •