CVE-2014-1475

Published: Jan 24, 2014Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authenticate as other users via unspecified vectors.

Affected (68)

Products: Drupal: Drupal

1 product

Configuration A

33 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	Version 7.0
Drupal Drupal	Version 7.0 alpha1
Drupal Drupal	Version 7.0 alpha2
Drupal Drupal	Version 7.0 alpha3
Drupal Drupal	Version 7.0 alpha4
Drupal Drupal	Version 7.0 alpha5
Drupal Drupal	Version 7.0 alpha6
Drupal Drupal	Version 7.0 alpha7
Drupal Drupal	Version 7.0 beta1
Drupal Drupal	Version 7.0 beta2
Drupal Drupal	Version 7.0 beta3
Drupal Drupal	Version 7.0 dev
Drupal Drupal	Version 7.0 rc1
Drupal Drupal	Version 7.0 rc2
Drupal Drupal	Version 7.0 rc3
Drupal Drupal	Version 7.0 rc4
Drupal Drupal	Version 7.10
Drupal Drupal	Version 7.11
Drupal Drupal	Version 7.12
Drupal Drupal	Version 7.13
Drupal Drupal	Version 7.14
Drupal Drupal	Version 7.15
Drupal Drupal	Version 7.16
Drupal Drupal	Version 7.17
Drupal Drupal	Version 7.18
Drupal Drupal	Version 7.19
Drupal Drupal	Version 7.1
Drupal Drupal	Version 7.20
Drupal Drupal	Version 7.21
Drupal Drupal	Version 7.22
Drupal Drupal	Version 7.23
Drupal Drupal	Version 7.24
Drupal Drupal	Version 7.2

Configuration B

35 vulnerable

Vulnerable Software	Affected Versions
Drupal Drupal	Version 6.0
Drupal Drupal	Version 6.0 beta1
Drupal Drupal	Version 6.0 beta2
Drupal Drupal	Version 6.0 beta3
Drupal Drupal	Version 6.0 beta4
Drupal Drupal	Version 6.0 dev
Drupal Drupal	Version 6.0 rc-1
Drupal Drupal	Version 6.0 rc-2
Drupal Drupal	Version 6.0 rc-3
Drupal Drupal	Version 6.0 rc-4
Drupal Drupal	Version 6.0 rc1
Drupal Drupal	Version 6.0 rc2
Drupal Drupal	Version 6.0 rc3
Drupal Drupal	Version 6.0 rc4
Drupal Drupal	Version 6.10
Drupal Drupal	Version 6.11
Drupal Drupal	Version 6.12
Drupal Drupal	Version 6.13
Drupal Drupal	Version 6.14
Drupal Drupal	Version 6.15
Drupal Drupal	Version 6.16
Drupal Drupal	Version 6.17
Drupal Drupal	Version 6.18
Drupal Drupal	Version 6.19
Drupal Drupal	Version 6.1
Drupal Drupal	Version 6.20
Drupal Drupal	Version 6.21
Drupal Drupal	Version 6.22
Drupal Drupal	Version 6.23
Drupal Drupal	Version 6.24
Drupal Drupal	Version 6.25
Drupal Drupal	Version 6.26
Drupal Drupal	Version 6.27
Drupal Drupal	Version 6.28
Drupal Drupal	Version 6.2

References (14)

http://secunia.com/advisories/56260

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/56601

Source: cve@mitre.org

http://www.debian.org/security/2014/dsa-2847

Source: cve@mitre.org

http://www.debian.org/security/2014/dsa-2851

Source: cve@mitre.org

http://www.mandriva.com/security/advisories?name=MDVSA-2014:031

Source: cve@mitre.org

http://www.securityfocus.com/bid/64973

Source: cve@mitre.org

https://drupal.org/SA-CORE-2014-001

Source: cve@mitre.org

Vendor Advisory

http://secunia.com/advisories/56260

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://secunia.com/advisories/56601

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2847

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.debian.org/security/2014/dsa-2851

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.mandriva.com/security/advisories?name=MDVSA-2014:031

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/64973

Source: af854a3a-2127-422b-91ae-364da2661108

https://drupal.org/SA-CORE-2014-001

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.