Design/Logic Flaw

2012-10-3116:55:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

46.9%

JSON

The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allows remote blocked users to access bypass intended access restrictions and possibly have other impacts by logging in.

CPENameOperatorVersion
shibb_autheq7.120.40

CPE	Name	Operator	Version
	shibb_auth	eq	7.120.40

References

drupalcode.org/project/shib_auth.git/commitdiff/2032f0a

www.openwall.com/lists/oss-security/2012/10/04/6

www.openwall.com/lists/oss-security/2012/10/07/1

drupal.org/node/1493244

drupal.org/node/1719392