2025-01-09 23:03:46 +00:00
{
"id" : "CVE-2024-13309" ,
"sourceIdentifier" : "mlhess@drupal.org" ,
"published" : "2025-01-09T21:15:28.740" ,
"lastModified" : "2025-01-09T21:15:28.740" ,
2025-01-12 03:03:49 +00:00
"vulnStatus" : "Awaiting Analysis" ,
2025-01-09 23:03:46 +00:00
"cveTags" : [ ] ,
"descriptions" : [
{
"lang" : "en" ,
"value" : "Improper Authentication vulnerability in Drupal Login Disable allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Login Disable: from 2.0.0 before 2.1.1."
2025-01-12 03:03:49 +00:00
} ,
{
"lang" : "es" ,
"value" : "La vulnerabilidad de autenticaci\u00f3n incorrecta en Login Disable de Drupal permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a Login Disable: desde 2.0.0 antes de 2.1.1."
2025-01-09 23:03:46 +00:00
}
] ,
"metrics" : { } ,
"weaknesses" : [
{
"source" : "mlhess@drupal.org" ,
"type" : "Secondary" ,
"description" : [
{
"lang" : "en" ,
"value" : "CWE-287"
}
]
}
] ,
"references" : [
{
"url" : "https://www.drupal.org/sa-contrib-2024-073" ,
"source" : "mlhess@drupal.org"
}
]
}