PT-2010-4538
CVE-2010-3091
·
تاريخ النشر
2010-09-29
·
تاريخ التحديث
2010-09-30
الوصف من
CVSS 2.0
5.0
متوسطةالمقاييسAV:N/AC:L/Au:N/C:N/I:P/A:N
Name of the Vulnerable Software and Affected Versions
Drupal OpenID module versions prior to 6.18
Drupal OpenID module 5.x versions prior to 5.x-1.4
Description
The issue concerns the OpenID module in Drupal, which fails to verify the
openid.return to value as per the OpenID 2.0 protocol. This allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider.Recommendations
For Drupal 6.x, update to version 6.18 or later.
For Drupal 5.x, update to OpenID module version 5.x-1.4 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾