CVE-2014-2983 Information

Description

Drupal 6.x before 6.31 and 7.x before 7.27 does not properly isolate the cached data of different anonymous users which allows remote anonymous users to obtain sensitive interim form input information in opportunistic situations via unspecified vectors.

Reference

http://www.debian.org/security/2014/dsa-2913 http://www.debian.org/security/2014/dsa-2914 http://www.openwall.com/lists/oss-security/2014/04/22/2 https://drupal.org/SA-CORE-2014-002