| Package | Affected versions | Patched versions |
|---|---|---|
| crmngp | = 6.x-1.0= 6.x-1.1= 6.x-1.10= 6.x-1.11= 6.x-1.2= 6.x-1.3= 6.x-1.4= 6.x-1.5= 6.x-1.6= 6.x-1.8= 6.x-1.9 |
An administration page in the NGP COO/CWP Integration (crmngp) module 6.x before 6.x-1.12 for Drupal does not perform the expected access control, which allows remote attackers to read log information via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free