Re: CVE request for Drupal contributed modules

[Kurt Seifried <kseifried () redhat com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 08/21/2013 05:45 PM, Forest Monsen wrote:
> Hi there,
>
> I'd like to request CVE identifiers for...
>
> SA-CONTRIB-2013-067 - BOTCHA - Information Disclosure (potential
> Privilege Escalation) https://drupal.org/node/2065057
>
> SA-CONTRIB-2013-068 - Entity API - Access Bypass 
> https://drupal.org/node/2065207
>
> SA-CONTRIB-2013-069 - Password Policy - XSS 
> https://drupal.org/node/2065387
>
> SA-CONTRIB-2013-070 - Zen - Cross Site Scripting 
> https://drupal.org/node/2071157
>
> Thanks!
>
> Best, Forest

CVE-2013-4272 Drupal SA-CONTRIB-2013-067 - BOTCHA - Information
Disclosure (potential Privilege Escalation)

CVE-2013-4273 Drupal SA-CONTRIB-2013-068 - Entity API - Access Bypass

CVE-2013-4274 Drupal SA-CONTRIB-2013-069 - Password Policy - XSS

CVE-2013-4275 Drupal SA-CONTRIB-2013-070 - Zen - Cross Site Scripting


- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.14 (GNU/Linux)
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=BchA
-----END PGP SIGNATURE-----