Lucene search
Veracode Vulnerability DatabaseVERACODE:4690HistoryJul 26, 2017 - 3:41 a.m.
Authentication Hijack
2017-07-2603:41:29
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
0.006 Low
EPSS
Percentile
79.2%
openid/php-openid is vulnerable to authentication hijack. examples/consumer/common.php incorrectly checks the openid.realm parameter against the SERVER_NAME element. This can be leveraged by attackers to hijack authentication through HTTP host headers.
| CPE | Name | Operator | Version |
|---|---|---|---|
| openid/php-openid | le | 3.0.3 |
Related
cve
cve
CVE-2016-2049
2016-02-01 21:59:03
prion
prion
Design/Logic Flaw
2016-02-01 21:59:00
cvelist
cvelist
CVE-2016-2049
2016-02-01 21:00:00
ubuntucve
ubuntucve
CVE-2016-2049
2016-02-01 00:00:00
nvd
nvd
CVE-2016-2049
2016-02-01 21:59:03