CVE-2015-3234 in Drupal
Сводка (Английский)
The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Резервировать
10.04.2015
Раскрытие
22.06.2015
Статус
Подтверждённый
Записи
VulDB provides additional information and datapoints for this CVE:
| ИД | Уязвимость | CWE | Экс | Кон | CVE |
|---|---|---|---|---|---|
| 76042 | Drupal OpenID эскалация привилегий | 20 | Не определено | Официальное исправление | CVE-2015-3234 |