CVEvulnerability
CVE-2014-1475
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-01-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authenticate as other users via unspecified vectors.
Affected configurations
• drupal drupal 7.0
• drupal drupal 7.1
• drupal drupal 7.2
• drupal drupal 7.10
• drupal drupal 7.11
• drupal drupal 7.12
• drupal drupal 7.13
• drupal drupal 7.14
• drupal drupal 7.15
• drupal drupal 7.16
• drupal drupal 7.17
• drupal drupal 7.18
• drupal drupal 7.19
• drupal drupal 7.20
• drupal drupal 7.21
• drupal drupal 7.22
• drupal drupal 7.23
• drupal drupal 7.24
• drupal drupal 6.0
• drupal drupal 6.1
• drupal drupal 6.2
• drupal drupal 6.10
• drupal drupal 6.11
• drupal drupal 6.12
• drupal drupal 6.13
• drupal drupal 6.14
• drupal drupal 6.15
• drupal drupal 6.16
• drupal drupal 6.17
• drupal drupal 6.18
• drupal drupal 6.19
• drupal drupal 6.20
• drupal drupal 6.21
• drupal drupal 6.22
• drupal drupal 6.23
• drupal drupal 6.24
• drupal drupal 6.25
• drupal drupal 6.26
• drupal drupal 6.27
• drupal drupal 6.28
References
- http://secunia.com/advisories/56260 Vendor Advisory
- http://secunia.com/advisories/56601 secunia.com
- http://www.debian.org/security/2014/dsa-2847 www.debian.org
- http://www.debian.org/security/2014/dsa-2851 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:031 www.mandriva.com
- http://www.securityfocus.com/bid/64973 www.securityfocus.com
- https://drupal.org/SA-CORE-2014-001 Vendor Advisory
- http://secunia.com/advisories/56260 Vendor Advisory
- http://secunia.com/advisories/56601 secunia.com
- http://www.debian.org/security/2014/dsa-2847 www.debian.org
- http://www.debian.org/security/2014/dsa-2851 www.debian.org
- http://www.mandriva.com/security/advisories?name=MDVSA-2014:031 www.mandriva.com
- http://www.securityfocus.com/bid/64973 www.securityfocus.com
- https://drupal.org/SA-CORE-2014-001 Vendor Advisory