Support for Drupal 7 is ending on 5 January 2025—it’s time to migrate to Drupal 10! Learn about the many benefits of Drupal 10 and find migration tools in our resource center.Project:
Date:
2017-October-11
Vulnerability:
Access Bypass
Description:
The netFORUM Authentication module implements external authentication for users against netFORUM.
The module does not correctly use flood control making it susceptible to brute force attacks.
Solution:
Install the latest version:
- If you use the netFORUM Authentication module for Drupal 7.x, upgrade to netFORUM Authentication 7.x-1.1
Reported By:
Fixed By:
Coordinated By:
- Cash Williams of the Drupal Security Team
