Lucene search
MitreCVELIST:CVE-2010-3686HistoryOct 03, 2022 - 4:20 p.m.
CVE-2010-3686
2022-10-0316:20:58
mitre
www.cve.org
5
drupal
openid
module
security
vulnerability
bypass
authentication
The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ensuring that fields are signed, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider.
Related
ubuntucve
ubuntucve
CVE-2010-3686
2010-09-29 00:00:00
cve
cve
CVE-2010-3686
2022-10-03 16:20:58
prion
prion
Authentication flaw
2010-09-29 17:00:00
nvd
nvd
CVE-2010-3686
2010-09-29 17:00:05
nessus
nessus
Debian DSA-2113-1 : drupal6 - several vulnerabilities
2010-09-21 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2113-1)
2010-10-10 00:00:00
debian
debian
[BSA-023] Security Update for drupal6
2011-01-25 16:43:46