CVE-2011-0899: Johan Lindskog Aes Encryption Module

Medium severity, CVSS 5.0. EPSS: 0.9% chance of exploitation in the next 30 days.

The AES encryption module 7.x-1.4 for Drupal leaves certain debugging code enabled in release, which records the plaintext password of the last logged-in user and allows remote attackers to gain privileges as that user.

Affected products

• Johan Lindskog Aes Encryption Module: version 7.x-1.4 only

Published 2011-02-07. Last modified 2026-06-16.