CVE-2012-2720: Adam Ross Tokenauth

Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days.

The Token Authentication (tokenauth) module 6.x-1.x before 6.x-1.7 for Drupal does not properly revert user sessions, which might allow remote attackers to perform requests with extra privileges.

Affected products

• Adam Ross Tokenauth: version 6.x-1.0 only; version 6.x-1.1 only; version 6.x-1.3 only; version 6.x-1.4 only; version 6.x-1.5 only; version 6.x-1.6 only; …

Published 2012-06-27. Last modified 2026-06-16.