Boombatower Subuser vulnerabilities

• boombatower subuser The Subuser module before 6.x-1.8 for Drupal does not properly check "switch subuser" permissions... CVE-2012-4487 4.0 MediumNovember 2, 2012
• boombatower subuser Cross-site request forgery (CSRF) vulnerability in the Subuser module before 6.x-1.8 for Drupal... CVE-2012-4486 6.8 MediumNovember 2, 2012