CVE-2012-5651
Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.
Published: 2013-01-03 · CVSS: Unscored
Drupal 6.x before 6.27 and 7.x before 7.18 displays information for blocked users, which might allow remote attackers to obtain sensitive information by reading the search results.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7