CVE-2015-3234 in Drupal

Riassunto

di MITRE

The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Prenotare: 10/04/2015
• Divulgazione: 22/06/2015
• Moderazione: accettato
• Voce: VDB-76042
• CPE: pronto
• CWE: CWE-20 (confermato)
• CVSS: 4.3 (NVD)
• EPSS: 0.01876
• KEV: no
• Attività: molto basso
• Settore: Agriculture, Hostingprovider, ...

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-3234
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-3234
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-3234/