| Package | Affected versions | Patched versions |
|---|---|---|
| bad behavior | = 6.x-1.0= 6.x-1.x= 6.x-2.1= 6.x-2.113= 6.x-2.114= 6.x-2.115= 6.x-2.116= 6.x-2.13= 6.x-2.14= 6.x-2.2= 6.x-2.200= 6.x-2.214= 6.x-2.215= 6.x-2.216= 6.x-2.217= 6.x-2.220= 6.x-2.221= 6.x-2.2210= 6.x-2.2211= 6.x-2.2212= 6.x-2.2213= 6.x-2.2214= 6.x-2.2215= 6.x-2.222= 6.x-2.223= 6.x-2.225= 6.x-2.226= 6.x-2.227= 6.x-2.228= 7.x-2.220= 7.x-2.221= 7.x-2.2210= 7.x-2.2211= 7.x-2.2212= 7.x-2.2213= 7.x-2.2214= 7.x-2.2215= 7.x-2.2216= 7.x-2.222= 7.x-2.223= 7.x-2.225= 7.x-2.226= 7.x-2.227= 7.x-2.228= 7.x-2.x |
The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" permission to obtain sensitive information by reading a log file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free