Description
Drupal 6.x before 6.16 and 5.x before version 5.22 does not properly block users under certain circumstances. A user with an open session that was blocked could maintain their session on the Drupal site despite being blocked.
Remediation
References
Related Vulnerabilities
WordPress Plugin Swift Landing Page Cross-Site Request Forgery (1.1)
WordPress Other Vulnerability (CVE-2007-0233)
Oracle JRE CVE-2013-1564 Vulnerability (CVE-2013-1564)
MediaWiki Observable Differences in Behavior to Error Inputs Vulnerability (CVE-2020-35624)
Internet Information Services Other Vulnerability (CVE-1999-0407)