Unrated severityNVD Advisory· Published Apr 23, 2014· Updated May 6, 2026
CVE-2014-2983
CVE-2014-2983
Description
Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users, which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.
Affected products
4cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*
- cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- drupal.org/SA-CORE-2014-002nvdPatchVendor Advisory
- www.debian.org/security/2014/dsa-2913nvdThird Party Advisory
- www.debian.org/security/2014/dsa-2914nvdThird Party Advisory
- www.openwall.com/lists/oss-security/2014/04/22/2nvdMailing ListThird Party Advisory
News mentions
0No linked articles in our index yet.