SB2017062510 - Fedora 26 update for drupal7
Published: June 25, 2017 Updated: April 24, 2025
Security Bulletin ID
SB2017062510
Severity
Medium
Patch available
YES
Number of vulnerabilities
1
Exploitation vector
Remote access
Highest impact
Data manipulation
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 1 security vulnerability.
1) Security restrictions bypass (CVE-ID: CVE-2017-6922)
The vulnerability allows a remote attacker to bypass security restrictions on the target system.The weakness exists due to insufficient file protection. A remote attacker can bypass access restrictions and view private files that have been uploaded by an anonymous user but not permanently attached to content on the site.
Successful exploitation of the vulnerability may result in access bypass.
Note: The vulnerability was being actively exploited for spam purposes.
Remediation
Install update from vendor's website.