Description

The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not checking for reuse of openid.response_nonce values, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider.

Remediation

References

CVE-2010-3685

Related Vulnerabilities

WordPress Plugin Contact Form to DB by BestWebSoft-Messages Database For WordPress SQL Injection (1.7.2)

Ruby Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-2339)

MediaWiki Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2023-45364)

Nginx Out-of-bounds Read Vulnerability (CVE-2023-27730)

WordPress Plugin User Meta 'uploader.php' Arbitrary File Upload (1.1.1)

Severity

Medium

Classification

CVE-2010-3685 CWE-287

Tags

Missing Update Known Vulnerabilities