CVE-2015-3234 in Drupal

Resumen (Inglés)

The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

2015-04-10

Divulgación

2015-06-22

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
76042	Drupal OpenID escalada de privilegios	20	No está definido	Arreglo oficial	CVE-2015-3234

Fuentes

• MITRE
• NVD
• CVE Details