high7.5
CVE-2014-1475
The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authenticate as other users via unspecified vectors.
Impact
The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authenticate as other users via unspecified vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Drupal | Drupal | Versions 7.0, 7.1, 7.2, 7.10, 7.11, 7.12 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/56260
- http://secunia.com/advisories/56601
- http://www.debian.org/security/2014/dsa-2847
- http://www.debian.org/security/2014/dsa-2851
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:031
- http://www.securityfocus.com/bid/64973
- https://drupal.org/SA-CORE-2014-001
- http://secunia.com/advisories/56260
- http://secunia.com/advisories/56601
- http://www.debian.org/security/2014/dsa-2847
- http://www.debian.org/security/2014/dsa-2851
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:031
- http://www.securityfocus.com/bid/64973
- https://drupal.org/SA-CORE-2014-001