CVE-2015-4395

Published: Jun 15, 2015Modified: May 6, 2026

3.5

Vector

AV:N/AC:M/Au:S/C:P/I:N/A:N

Exploitability: 6.8 / Impact: 2.9

Source: NVD

Description

The HybridAuth Social Login module 7.x-2.x before 7.x-2.10 for Drupal stores passwords in plaintext when the "Ask user for a password when registering" option is enabled, which allows remote authenticated users with certain permissions to obtain sensitive information by leveraging access to the database.

Affected (10)

Products: Hybridauth Social Login Project: Hybridauth Social Login

Hybridauth Social Login Project

1 product

Hybridauth Social Login

Configuration A

10 vulnerable

Vulnerable Software	Affected Versions
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.0
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.1
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.2
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.3
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.4
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.5
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.6
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.7
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.8
Hybridauth Social Login Project Hybridauth Social Login	Version 7.x-2.9