medium4.3
CVE-2012-4494
The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allows remote blocked users to access bypass …
Impact
The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allows remote blocked users to access bypass intended access restrictions and possibly have other impacts by logging in.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Niif | Shibb Auth | Version 7.x-4.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/1493244
- http://drupal.org/node/1719392
- http://drupalcode.org/project/shib_auth.git/commitdiff/2032f0a
- http://www.openwall.com/lists/oss-security/2012/10/04/6
- http://www.openwall.com/lists/oss-security/2012/10/07/1
- http://drupal.org/node/1493244
- http://drupal.org/node/1719392
- http://drupalcode.org/project/shib_auth.git/commitdiff/2032f0a
- http://www.openwall.com/lists/oss-security/2012/10/04/6
- http://www.openwall.com/lists/oss-security/2012/10/07/1