CVE-2011-0899
The AES encryption module 7.x-1.4 for Drupal leaves certain debugging code enabled in release, which records the plaintext password of the last logged-in user and allows remote …
Published: 2011-02-07 · CVSS: Unscored
The AES encryption module 7.x-1.4 for Drupal leaves certain debugging code enabled in release, which records the plaintext password of the last logged-in user and allows remote attackers to gain privileges as that user.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7