View online: https://www.drupal.org/node/2915530

Project: netFORUM Authentication [1] Version: 7.x-1.0 Date: 2017-October-11 Security risk: *Moderately critical* 12∕25 AC:None/A:None/CI:None/II:None/E:Theoretical/TD:All [2] Vulnerability: Access Bypass

Description:  The netFORUM Authentication module implements external authentication for users against netFORUM.

The module does not correctly use flood control making it susceptible to brute force attacks.

Solution:  Install the latest version:

* If you use the netFORUM Authentication module for Drupal 7.x, upgrade to netFORUM Authentication 7.x-1.1 [3]

Reported By:  * William Hurley [4]

Coordinated By:  * Cash Williams [5] of the Drupal Security Team

Fixed By:  * William Hurley [6]

[1] https://www.drupal.org/project/netforum_authentication [2] https://www.drupal.org/security-team/risk-levels [3] https://www.drupal.org/project/netforum_authentication/releases/7.x-1.1 [4] https://www.drupal.org/user/wwhurley [5] https://www.drupal.org/u/cashwilliams [6] https://www.drupal.org/u/wwhurley