The Activism module 6.x-2.x before 6.x-2.1 for Drupal does not properly restrict access to the Campaign content type, which might allow remote attackers to bypass access restrictions and possibly have other unspecified impact.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Activism | Morbus_iff | 6.x-2.0 (including) | 6.x-2.0 (including) |
| Activism | Morbus_iff | 6.x-2.x-dev (including) | 6.x-2.x-dev (including) |