Lucene search
K

CVE-2010-3685

🗓️ 29 Sep 2010 16:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 54 Views

The OpenID module in Drupal 6.x before 6.18 violates OpenID 2.0 protocol by not checking for reuse of openid.response_nonce values, allowing remote attackers to bypass authentication

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Tenable Nessus
Drupal OpenID module < 5.x-1.5 Authentication Bypass Vulnerability
12 Aug 201000:00
nessus
Tenable Nessus
Debian DSA-2113-1 : drupal6 - several vulnerabilities
21 Sep 201000:00
nessus
Cvelist
CVE-2010-3685
29 Sep 201016:00
cvelist
Debian
[BSA-023] Security Update for drupal6
25 Jan 201116:43
debian
EUVD
EUVD-2010-3669
7 Oct 202500:30
euvd
NVD
CVE-2010-3685
29 Sep 201017:00
nvd
OpenVAS
Debian: Security Advisory (DSA-2113-1)
10 Oct 201000:00
openvas
OSV
DSA-2113-1 drupal6 - several vulnerabilities
20 Sep 201000:00
osv
Prion
Authentication flaw
29 Sep 201017:00
prion
RedhatCVE
CVE-2010-3685
22 May 202512:42
redhatcve
Rows per page
NVD
Node
drupaldrupalMatch6.0
OR
drupaldrupalMatch6.0beta1
OR
drupaldrupalMatch6.0beta2
OR
drupaldrupalMatch6.0beta3
OR
drupaldrupalMatch6.0beta4
OR
drupaldrupalMatch6.0dev
OR
drupaldrupalMatch6.0rc1
OR
drupaldrupalMatch6.0rc2
OR
drupaldrupalMatch6.0rc3
OR
drupaldrupalMatch6.0rc4
OR
drupaldrupalMatch6.1
OR
drupaldrupalMatch6.2
OR
drupaldrupalMatch6.3
OR
drupaldrupalMatch6.4
OR
drupaldrupalMatch6.5
OR
drupaldrupalMatch6.6
OR
drupaldrupalMatch6.7
OR
drupaldrupalMatch6.8
OR
drupaldrupalMatch6.9
OR
drupaldrupalMatch6.10
OR
drupaldrupalMatch6.11
OR
drupaldrupalMatch6.12
OR
drupaldrupalMatch6.13
OR
drupaldrupalMatch6.14
OR
drupaldrupalMatch6.15
OR
drupaldrupalMatch6.16
OR
drupaldrupalMatch6.17
Node
OROROROR
peter_wolaninopenidMatch5.x-1.xdev

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

29 Apr 2026 01:13Current
7High risk
Vulners AI Score7
CVSS 25
EPSS0.00633
54