Lucene search
HistoryFeb 05, 2008 - 2:00 a.m.
CVE-2008-0570
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.002
Percentile
57.0%
The OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed_id returned by an OpenID provider, which allows remote OpenID providers to spoof OpenID authentication for domains associated with other providers.
Affected configurations
Node
drupalopenidMatch5
Related
prion
prion
Authentication flaw
2008-02-05 02:00:00
cvelist
cvelist
CVE-2008-0570
2008-02-05 01:00:00
cve
cve
CVE-2008-0570
2008-02-05 02:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.8
Confidence
Low
EPSS
0.002
Percentile
57.0%
Related for NVD:CVE-2008-0570