Johan Lindskog: >> Aes Encryption Module Security Vulnerabilities
The AES encryption module 7.x-1.4 for Drupal leaves certain debugging code enabled in release, which records the plaintext password of the last logged-in user and allows remote attackers to gain privileges as that user.
CVSS Score
5.0
EPSS Score
0.003
Published
2011-02-07