NVD

Id
51644  
Name
CVE-2009-4527  
Description
The Shibboleth authentication module 5.x before 5.x-3.4 and 6.x before 6.x-3.2, a module for Drupal, does not properly remove statically granted privileges after a logout or other session change, which allows physically proximate attackers to gain privileges by using an unattended web browser.  
Reject
 
CVSS Version
2  
CVSS Score
4.6  
Severity
Medium  
CVSS Base Score
4.6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2009-12-31  
Modified Date
2010-01-06  
Seq
2009-4527  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
261727 51644 CVE-2009-4527 http://drupal.org/node/604488  View
261728 51644 CVE-2009-4527 36684  View
261729 51644 CVE-2009-4527 ADV-2009-2919  View
261730 51644 CVE-2009-4527 shibboleth-saml2-priv-escalation(53779)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
44258 JVNDB-2009-005265 Drupal 用の Shibboleth 認証モジュールにおける権限を取得される脆弱性 Drupal 用の Shibboleth 認証モジュールは、ログアウトまたは他のセッション変更の後に静的に付与された権限を適切に削除しないため、権限を取得される脆弱性が存在します。 CVE-2009-4527 41958 CVE-2009-4527 51644 4.6 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-005265.html 2009-10-14 2012-09-25 View