CVE

Id
81672  
CVE No.
CVE-2015-4395  
Status
Candidate  
Description
The HybridAuth Social Login module 7.x-2.x before 7.x-2.10 for Drupal stores passwords in plaintext when the "Ask user for a password when registering" option is enabled, which allows remote authenticated users with certain permissions to obtain sensitive information by leveraging access to the database.  
Phase
Assigned (20150605)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
733413 81672 CVE-2015-4395 MLIST:[oss-security] 20150425 CVE requests for Drupal contributed modules (from SA-CONTRIB-2015-034 to SA-CONTRIB-2015-099)  View
733414 81672 CVE-2015-4395 URL:http://www.openwall.com/lists/oss-security/2015/04/25/6  View
733415 81672 CVE-2015-4395 MISC:https://www.drupal.org/node/2475943  View
733416 81672 CVE-2015-4395 CONFIRM:https://www.drupal.org/node/2475443  View
733417 81672 CVE-2015-4395 BID:74364  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
8489 JVNDB-2015-003809 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat における JavaScript API の実行の制限を回避される脆弱性 Windows および Mac OS X 上で稼働する Adobe Reader および Acrobat には、JavaScript API の実行の制限を回避される脆弱性が存在します。 CVE-2015-4447 81672 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-003809.html  View