CVE-2014-9015
Drupal 6.x before 6.34 and 7.x before 7.34 allows remote attackers to hijack sessions via a crafted request, as demonstrated by a crafted request to a server that supports both HTTP and HTTPS sessions.
| Software | From | Fixed in |
|---|---|---|
drupal / drupal
|
6.0 | 6.34 |
|
drupal / drupal
|
7.0 | 7.34 |
| debian / debian_linux | 7.0 | 7.0.x |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime