The Bad Behavior module 6.x-2.x before 6.x-2.2216 and 7.x-2.x before 7.x-2.2216 for Drupal logs usernames and passwords, which allows remote authenticated users with the "administer bad behavior" permission to obtain sensitive information by reading a log file.
CVSS 2.0
Severity: MEDIUM
Problem Type: CWE-200,
Products Affected
| Vendor | Product | Version |
|---|---|---|
| bad_behavior_project | bad_behavior | 6.x-2.227 |
| bad_behavior_project | bad_behavior | 7.x-2.2211 |
| bad_behavior_project | bad_behavior | 6.x-2.2215 |
| bad_behavior_project | bad_behavior | 6.x-2.223 |
| bad_behavior_project | bad_behavior | 7.x-2.227 |
| bad_behavior_project | bad_behavior | 7.x-2.228 |
| bad_behavior_project | bad_behavior | 6.x-2.2 |
| bad_behavior_project | bad_behavior | 6.x-2.114 |
| bad_behavior_project | bad_behavior | 6.x-2.13 |
| bad_behavior_project | bad_behavior | 6.x-2.217 |
| bad_behavior_project | bad_behavior | 6.x-2.220 |
| bad_behavior_project | bad_behavior | 6.x-2.228 |
| bad_behavior_project | bad_behavior | 6.x-2.113 |
| bad_behavior_project | bad_behavior | 6.x-2.1 |
| bad_behavior_project | bad_behavior | 6.x-2.226 |
| bad_behavior_project | bad_behavior | 7.x-2.221 |
| bad_behavior_project | bad_behavior | 6.x-1.0 |
| bad_behavior_project | bad_behavior | 6.x-2.221 |
| bad_behavior_project | bad_behavior | 7.x-2.2216 |
| bad_behavior_project | bad_behavior | 6.x-2.222 |
| bad_behavior_project | bad_behavior | 7.x-2.220 |
| bad_behavior_project | bad_behavior | 6.x-2.215 |
| bad_behavior_project | bad_behavior | 6.x-2.14 |
| bad_behavior_project | bad_behavior | 7.x-2.222 |
| bad_behavior_project | bad_behavior | 6.x-2.2210 |
| bad_behavior_project | bad_behavior | 6.x-2.2212 |
| bad_behavior_project | bad_behavior | 6.x-2.116 |
| bad_behavior_project | bad_behavior | 6.x-2.216 |
| bad_behavior_project | bad_behavior | 7.x-2.2215 |
| bad_behavior_project | bad_behavior | 7.x-2.223 |
| bad_behavior_project | bad_behavior | 7.x-2.x |
| bad_behavior_project | bad_behavior | 6.x-2.225 |
| bad_behavior_project | bad_behavior | 6.x-1.x |
| bad_behavior_project | bad_behavior | 6.x-2.2211 |
| bad_behavior_project | bad_behavior | 6.x-2.214 |
| bad_behavior_project | bad_behavior | 7.x-2.2214 |
| bad_behavior_project | bad_behavior | 7.x-2.225 |
| bad_behavior_project | bad_behavior | 7.x-2.2212 |
| bad_behavior_project | bad_behavior | 6.x-2.200 |
| bad_behavior_project | bad_behavior | 7.x-2.226 |
| bad_behavior_project | bad_behavior | 6.x-2.115 |
| bad_behavior_project | bad_behavior | 6.x-2.2214 |
| bad_behavior_project | bad_behavior | 7.x-2.2210 |
| bad_behavior_project | bad_behavior | 6.x-2.2213 |
| bad_behavior_project | bad_behavior | 7.x-2.2213 |