it-securitynotifies AT lists.piratenpartei.de
Betreff: Sicherheitsankündigungen
Listenarchiv
[IT-SecNots] [Security-news] RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2019-018
Chronologisch Thread
- From: security-news AT drupal.org
- To: security-news AT drupal.org
- Subject: [IT-SecNots] [Security-news] RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2019-018
- Date: Wed, 20 Feb 2019 19:54:48 +0000 (UTC)
- List-archive: <http://lists.drupal.org/pipermail/security-news/>
- List-id: <security-news.drupal.org>
View online: https://www.drupal.org/sa-contrib-2019-018
Project: RESTful Web Services [1]
Date: 2019-February-20
Security risk: *Critical* 19∕25
AC:None/A:User/CI:All/II:All/E:Theoretical/TD:Default [2]
Vulnerability: Access bypass
Description:
This resolves issues described in SA-CORE-2019-003 [3] for this module. Not
all configurations are affected. See SA-CORE-2019-003 [4] for details.
Solution:
Install the latest version:
* If you use the RESTful Web Services module for Drupal 7.x, upgrade to
restws 7.x-2.8 [5]
[1] https://www.drupal.org/project/restws
[2] https://www.drupal.org/security-team/risk-levels
[3] https://www.drupal.org/sa-core-2019-003
[4] https://www.drupal.org/sa-core-2019-003
[5] https://www.drupal.org/project/restws/releases/7.x-2.8
_______________________________________________
Security-news mailing list
Security-news AT drupal.org
Unsubscribe at https://lists.drupal.org/mailman/listinfo/security-news
- [IT-SecNots] [Security-news] RESTful Web Services - Critical - Access bypass - SA-CONTRIB-2019-018, security-news, 20.02.2019
Archiv bereitgestellt durch MHonArc 2.6.19.