CVE-2010-2473

Published: 07 November 2019

Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked.

Priority

Medium

CVSS 3 base score: 6.5

Status

References

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2473
• NVD
• Launchpad
• Debian

Bugs

• http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=592716