description: The Basic webmail module 6.x-1.x before 6.x-1.2 for Drupal allows remote authenticated users with the "access basic_webmail" permission to read arbitrary users' email addresses.
problem types: Other
affected:
{
product: Basic webmail module
vendor: n/a
versions:
status: affected, version: 6.x-1.x before 6.x-1.2
}