CVE

Id
41962  
CVE No.
CVE-2009-4527  
Status
Candidate  
Description
The Shibboleth authentication module 5.x before 5.x-3.4 and 6.x before 6.x-3.2, a module for Drupal, does not properly remove statically granted privileges after a logout or other session change, which allows physically proximate attackers to gain privileges by using an unattended web browser.  
Phase
Assigned (20091231)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
459799 41962 CVE-2009-4527 CONFIRM:http://drupal.org/node/604488  View
459800 41962 CVE-2009-4527 BID:36684  View
459801 41962 CVE-2009-4527 URL:http://www.securityfocus.com/bid/36684  View
459802 41962 CVE-2009-4527 SECUNIA:37057  View
459803 41962 CVE-2009-4527 URL:http://secunia.com/advisories/37057  View
459804 41962 CVE-2009-4527 VUPEN:ADV-2009-2919  View
459805 41962 CVE-2009-4527 URL:http://www.vupen.com/english/advisories/2009/2919  View
459806 41962 CVE-2009-4527 XF:shibboleth-saml2-priv-escalation(53779)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
44261 JVNDB-2009-005268 httpdx における Web ページのソースコードを取得される脆弱性 httpdx には、Web ページのソースコードを取得される脆弱性が存在します。 CVE-2009-4531 41962 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005268.html  View