Drupal Userpoints Module "userpoint" Information Disclosure

06 November 2009
Bookmark and Share
Userpoints is a module for the Drupal content manager. The application is exposed to an information disclosure issue because it fails to restrict access to certain portions of the affected application. Specifically, users with "View own userpoints" permissions are allowed to access any userpoint data of any other user.Userpoints versions earlier than 6.x-1.1 are affected by this issue.

Ref: http://drupal.org/node/610818

09.44.95 - CVE: Not Available
Platform: Web Application