CVE

Id
64499  
CVE No.
CVE-2013-4552  
Status
Candidate  
Description
lib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp allows remote attackers to authenticate as an arbitrary user via the user name (uid) in a cookie.  
Phase
Assigned (20130612)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
635751 64499 CVE-2013-4552 MLIST:[oss-security] 20131105 CVE request: drupalauth module for simpleSAMLphp trivial impersonation  View
635752 64499 CVE-2013-4552 URL:http://www.openwall.com/lists/oss-security/2013/11/05/1  View
635753 64499 CVE-2013-4552 MLIST:[oss-security] 20131108 Re: CVE request: drupalauth module for simpleSAMLphp trivial impersonation  View
635754 64499 CVE-2013-4552 URL:http://www.openwall.com/lists/oss-security/2013/11/08/6  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
23585 JVNDB-2013-005160 SPIP で使用される Security Screen における任意の PHP を実行される脆弱性 SPIP で使用される Security Screen (_core_/securite/ecran_securite.php) には、任意の PHP を実行される脆弱性が存在します。 CVE-2013-4557 64499 7.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-005160.html  View