Security Advisory

CVE-2008-0570

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2008-02-05 01:00:00

Last updated 2024-08-07 07:46:55

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

The OpenID 5.x-1.0 and earlier module for Drupal does not properly verify the claimed_id returned by an OpenID provider, which allows remote OpenID providers to spoof OpenID authentication for domains associated with other providers.

← Browse all CVEs View on cve.org ↗