Drupal Spaces third party module version 6.x suffers from an access bypass vulnerability…. Drupal Spaces third party module version 6.x suffers from an access bypass vulnerability.
Read more http://packetstormsecurity.com/files/123751/DRUPAL-SA-CONTRIB-2013-081.txt