Drupal : Registration Codes – Access bypass

source Drupal Version Developer Link Severity
Information At A Glance  
http://drupal.org/node/1394172    Version: 6.x drupal.org/project/regcode  Critical

 

Summary:

This module enables gives site admins the ability to restrict registration for new accounts to users with valid registration code. The default installation can allow an unauthenticated member view the registration code list, thus bypassing security.

What do I do to fix this?

Visit the developers page (see summary information) and update to Registration codes 6.x-2.4 or later.