Lucene search
HistoryJan 24, 2014 - 6:55 p.m.
CVE-2014-1475
security
drupal
openid
cve-2014-1475
authentication
6.3 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.0%
The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authenticate as other users via unspecified vectors.
Related
prion
prion
Design/Logic Flaw
2014-01-24 18:55:00
debiancve
debiancve
CVE-2014-1475
2014-01-24 18:55:00
debian
debian
[SECURITY] [DSA 2851-1] drupal6 security update
2014-02-02 20:03:49
[SECURITY] [DSA 2851-1] drupal6 security update
2014-02-02 20:03:31
[SECURITY] [DSA 2847-1] drupal7 security update
2014-01-20 22:40:48
cvelist
cvelist
CVE-2014-1475
2014-01-24 18:00:00
nessus
nessus
Debian DSA-2851-1 : drupal6 - impersonation
2014-02-03 00:00:00
Drupal 6.x < 6.30 OpenID Module Account Hijacking
2014-01-23 00:00:00
Debian DSA-2847-1 : drupal7 - several vulnerabilities
2014-01-21 00:00:00
ubuntucve
ubuntucve
CVE-2014-1475
2014-01-24 00:00:00
openvas
openvas
Debian Security Advisory DSA 2851-1 (drupal6 - impersonation)
2014-02-02 00:00:00
Debian: Security Advisory (DSA-2851-1)
2014-02-01 00:00:00
Debian Security Advisory DSA 2847-1 (drupal7 - several vulnerabilities)
2014-01-20 00:00:00
osv
osv
drupal7 - several
2014-01-20 00:00:00
drupal
drupal
SA-CORE-2014-001 - Drupal core - Multiple vulnerabilities
2014-01-15 00:00:00
mageia
mageia
Updated drupal package fixes security vulnerabilities
2014-01-31 20:43:58
securityvulns
securityvulns
[SECURITY] [DSA 2847-1] drupal7 security update
2014-02-03 00:00:00
6.3 Medium
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.007 Low
EPSS
Percentile
80.0%
Related for CVE-2014-1475