CVE-2015-3234 in Drupal
Summary
The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
04/10/2015
Disclosure
06/22/2015
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 76042 | Drupal OpenID input validation | 20 | Not defined | Official fix | CVE-2015-3234 |