1 results (0.005 seconds)

CVSS: 4.0EPSS: 0%CPEs: 6EXPL: 0

The Mandrill module 7.x-1.x before 7.x-1.2 for Drupal allows remote authenticated users to obtain password reset links by reading the logs in the Mandrill dashboard. El módulo Mandrill v7.x-1.x antes de v7.x-1.2 para Drupal permite a usuarios autenticados remotamente obtener enlaces de reinicio de contrañseña mediante la lectura de registros en el Mandrill dashboard. • http://drupal.org/node/1807894 http://drupal.org/node/1808846 http://www.openwall.com/lists/oss-security/2012/11/20/4 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •