CVE-2008-0568: Drupal Secure Site Module

High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Unspecified vulnerability in the IP-authentication feature in the Secure Site 5.x-1.0 and 4.7.x-1.0 module for Drupal allows remote attackers to gain the privileges of a user who has authenticated from behind the same proxy server as the attacker.

Affected products

• Drupal Secure Site Module: version 4.7 only; version 5.0 only

Published 2008-02-05. Last modified 2026-06-16.