CVE-2020-13667: 
PHP vulnerability analysis and mitigation

CVE-2020-13667 is an access bypass vulnerability discovered in Drupal Core's Workspaces module that allows attackers to access data without proper permissions. The vulnerability was disclosed on September 16, 2020, affecting multiple versions of Drupal including 7.x versions before 7.73, 8.8.x versions before 8.8.10, 8.9.x versions before 8.9.6, and 9.0.x versions before 9.0.6 (CERT-FR).

The vulnerability exists in the Workspaces module of Drupal Core, where improper access control mechanisms could allow unauthorized access to protected data. This security issue is tracked as SA-CORE-2020-008 in Drupal's security advisory system (Drupal Advisory).

The vulnerability could lead to unauthorized access to sensitive data, potentially compromising the confidentiality of information stored within Drupal installations that have the Workspaces module enabled (CERT-FR).

The vulnerability has been patched in Drupal versions 7.73, 8.8.10, 8.9.6, and 9.0.6. Users are advised to update to these versions or later to protect against this security issue. For users running versions prior to 8.8.x, it's important to note that these versions are no longer maintained and should be upgraded to a supported version before applying security updates (CERT-FR).