CVE-2010-3686

The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ensuring that fields are signed, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://drupal.org/node/880476	Patch Vendor Advisory
http://drupal.org/node/880480	Patch Vendor Advisory
http://marc.info/?l=oss-security&m=128418560705305&w=2
http://marc.info/?l=oss-security&m=128440896914512&w=2
http://www.debian.org/security/2010/dsa-2113
http://www.securityfocus.com/bid/42388
http://drupal.org/node/880476	Patch Vendor Advisory
http://drupal.org/node/880480	Patch Vendor Advisory
http://marc.info/?l=oss-security&m=128418560705305&w=2
http://marc.info/?l=oss-security&m=128440896914512&w=2
http://www.debian.org/security/2010/dsa-2113
http://www.securityfocus.com/bid/42388

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:drupal:drupal:6.0:::::::*
	cpe:2.3:a:drupal:drupal:6.0:beta1::::::
	cpe:2.3:a:drupal:drupal:6.0:beta2::::::
	cpe:2.3:a:drupal:drupal:6.0:beta3::::::
	cpe:2.3:a:drupal:drupal:6.0:beta4::::::
	cpe:2.3:a:drupal:drupal:6.0:dev::::::
	cpe:2.3:a:drupal:drupal:6.0:rc1::::::
	cpe:2.3:a:drupal:drupal:6.0:rc2::::::
	cpe:2.3:a:drupal:drupal:6.0:rc3::::::
	cpe:2.3:a:drupal:drupal:6.0:rc4::::::
	cpe:2.3:a:drupal:drupal:6.1:::::::*
	cpe:2.3:a:drupal:drupal:6.2:::::::*
	cpe:2.3:a:drupal:drupal:6.3:::::::*
	cpe:2.3:a:drupal:drupal:6.4:::::::*
	cpe:2.3:a:drupal:drupal:6.5:::::::*
	cpe:2.3:a:drupal:drupal:6.6:::::::*
	cpe:2.3:a:drupal:drupal:6.7:::::::*
	cpe:2.3:a:drupal:drupal:6.8:::::::*
	cpe:2.3:a:drupal:drupal:6.9:::::::*
	cpe:2.3:a:drupal:drupal:6.10:::::::*
	cpe:2.3:a:drupal:drupal:6.11:::::::*
	cpe:2.3:a:drupal:drupal:6.12:::::::*
	cpe:2.3:a:drupal:drupal:6.13:::::::*
	cpe:2.3:a:drupal:drupal:6.14:::::::*
	cpe:2.3:a:drupal:drupal:6.15:::::::*
	cpe:2.3:a:drupal:drupal:6.16:::::::*
	cpe:2.3:a:drupal:drupal:6.17:::::::*

Configuration 2 (hide)

OR	cpe:2.3:a:peter_wolanin:openid:5.x-1.0:::::::*
	cpe:2.3:a:peter_wolanin:openid:5.x-1.1:::::::*
	cpe:2.3:a:peter_wolanin:openid:5.x-1.2:::::::*
	cpe:2.3:a:peter_wolanin:openid:5.x-1.3:::::::*
	cpe:2.3:a:peter_wolanin:openid:5.x-1.x:dev::::::

History

21 Nov 2024, 01:19

Type	Values Removed	Values Added
References	~~() http://drupal.org/node/880476 - Patch, Vendor Advisory~~	() http://drupal.org/node/880476 - Patch, Vendor Advisory
References	~~() http://drupal.org/node/880480 - Patch, Vendor Advisory~~	() http://drupal.org/node/880480 - Patch, Vendor Advisory
References	~~() http://marc.info/?l=oss-security&m=128418560705305&w=2 -~~	() http://marc.info/?l=oss-security&m=128418560705305&w=2 -
References	~~() http://marc.info/?l=oss-security&m=128440896914512&w=2 -~~	() http://marc.info/?l=oss-security&m=128440896914512&w=2 -
References	~~() http://www.debian.org/security/2010/dsa-2113 -~~	() http://www.debian.org/security/2010/dsa-2113 -
References	~~() http://www.securityfocus.com/bid/42388 -~~	() http://www.securityfocus.com/bid/42388 -

Information

Published : 2010-09-29 17:00

Updated : 2025-04-11 00:51

NVD link : CVE-2010-3686

Mitre link : CVE-2010-3686

CVE.ORG link : CVE-2010-3686

JSON object : View

Products Affected

drupal

drupal

peter_wolanin

openid

CWE

CWE-287

Improper Authentication

{"id": "CVE-2010-3686", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2010-09-29T17:00:05.837", "references": [{"url": "http://drupal.org/node/880476", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://drupal.org/node/880480", "tags": ["Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=oss-security&m=128418560705305&w=2", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=oss-security&m=128440896914512&w=2", "source": "cve@mitre.org"}, {"url": "http://www.debian.org/security/2010/dsa-2113", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/42388", "source": "cve@mitre.org"}, {"url": "http://drupal.org/node/880476", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://drupal.org/node/880480", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://marc.info/?l=oss-security&m=128418560705305&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://marc.info/?l=oss-security&m=128440896914512&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.debian.org/security/2010/dsa-2113", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/42388", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-287"}]}], "descriptions": [{"lang": "en", "value": "The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ensuring that fields are signed, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider."}, {"lang": "es", "value": "El m\u00f3dulo de OpenID en Drupal v6.x antes de v6.18, y el m\u00f3dulo de OpenID v5.x antes de v5.x-1.4 para Drupal, viola el protocolo OpenID v2.0, al no garantizar que los campos est\u00e1n firmados, lo cual permite a atacantes remotos evitar la autenticaci\u00f3n mediante el aprovechamiento de una afirmaci\u00f3n de un proveedor de OpenID."}], "lastModified": "2025-04-11T00:51:21.963", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:drupal:drupal:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FFE07AAD-9207-4C5F-A108-7F7753E4F48C"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.0:beta1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D4149703-F7BB-4513-9379-992C089532D1"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.0:beta2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FCBC7BB8-2B50-476D-BD96-C968F105CE10"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.0:beta3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "550778E2-BEE5-403D-8744-0B18C5D3AFF3"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.0:beta4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "31B9F954-3A10-4378-A842-4061E97056DE"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.0:dev:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5BD3F6D1-2530-4B4C-86BE-DFDB886BF6E4"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.0:rc1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FDF535DF-2338-4BF8-A9AC-3B6C60C4D591"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.0:rc2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "58876D53-BCE4-459E-AC75-37E4E46621CA"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.0:rc3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "937F4629-2AA1-4954-BF72-8E9CAF1B67FA"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.0:rc4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6410BD0A-1B47-4EC2-8D2A-161ADBB09699"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52D8F291-CBEB-4EAA-9388-F63066A2DFA0"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0BD5AEC-F20E-4E53-AF3F-2C60BA2D2171"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A5D76BC5-0409-4D78-8064-A78B923E9167"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB73B2E1-2554-4CA2-9C82-B694509CE43A"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A7827ED-D8AF-42B3-B514-39A04EB0879A"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F491DE31-8DBB-4F4E-8798-F82DC855D08F"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1ADEA9E5-10EB-4AB4-BD90-1F64A15708AE"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.8:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "64D0A167-BE47-4E4E-8467-0AD2F38A3431"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C7CBB558-D5A3-4D68-9C62-D1D521BCFEF1"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.10:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B8D25FA1-2F31-40DB-AD54-DB233E060B0E"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.11:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7F91E944-26C4-4886-B9B9-F32BD15569BB"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.12:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F7DF00E9-3952-4D1C-8ED5-3270BD9697F6"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.13:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0B779FA7-E371-4111-95B7-301C804DC0CA"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.14:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B89B2E01-DFC7-4672-85E7-3930EE653806"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "39169C30-5F4D-4333-B0B9-0881811F1E01"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.16:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A9703D3D-C2D3-4EA0-A67E-CC17B0146B10"}, {"criteria": "cpe:2.3:a:drupal:drupal:6.17:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EEDA1EF-D7DB-47B5-BF6C-A9ED84427030"}], "operator": "OR"}]}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:peter_wolanin:openid:5.x-1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "421290CB-E860-4F32-AE8A-644DC73A423A"}, {"criteria": "cpe:2.3:a:peter_wolanin:openid:5.x-1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "659265E0-9FB3-4899-B9CE-54C57F65A30F"}, {"criteria": "cpe:2.3:a:peter_wolanin:openid:5.x-1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1A7E89F5-8445-4A86-9689-D21201DE8481"}, {"criteria": "cpe:2.3:a:peter_wolanin:openid:5.x-1.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4AAE6553-046E-4A06-B513-120194C29DCC"}, {"criteria": "cpe:2.3:a:peter_wolanin:openid:5.x-1.x:dev:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0E179022-F11E-4928-BA30-635732BE62E7"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}

5.0 /10