CVE-2015-8082: login_disable_project login_disable DEPRECATED: Code

Vulnerability summary

CVE-2015-8082 is a high (CVSS 7.5) DEPRECATED: Code vulnerability in login_disable_project login_disable. EPSS estimates a 1.65% chance of exploitation in the next 30 days, higher than 76.1% of scored vulnerabilities.

Timeline

1. 06-11-2015
   PublishedVulnerability first disclosed.
2. 16-09-2024
   Last modifiedVulnerability information updated.

Description

The Login Disable module 6.x-1.x before 6.x-1.1 and 7.x-1.x before 7.x-1.2 for Drupal does not properly load the user_logout function, which allows remote attackers to bypass the logout protection mechanism by leveraging a contributed user authentication module, as demonstrated by the CAS and URL Login modules.

• CWE-17DEPRECATED: CodeThis entry has been deprecated. It was originally used for organizing the Development View (CWE-699) and some other views, but it introduced unnecessary complexity and depth to the resulting tree.