Description

The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not checking for reuse of openid.response_nonce values, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider.

Remediation

References

CVE-2010-3685

Related Vulnerabilities

Joomla Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2010-3712)

WordPress Plugin Tierra's Billboard Manager SQL Injection (1.14)

WordPress Plugin PowerPack Lite for Beaver Builder Cross-Site Scripting (1.3.0.4)

WordPress Plugin RSVPMaker for Toastmasters Cross-Site Request Forgery (3.3.4)

MySQL CVE-2013-1523 Vulnerability (CVE-2013-1523)

Severity

Medium

Classification

CVE-2010-3685 CWE-287

Tags

Missing Update Known Vulnerabilities