BID:36432

Drupal OpenID Module Access Validation and Security Bypass Vulnerabilities

Info

Drupal OpenID Module Access Validation and Security Bypass Vulnerabilities

Bugtraq ID:	36432
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 16 2009 12:00AM
Updated:	Apr 16 2015 05:43PM
Credit:	Robert Metcalf and Heine Deelstra
Vulnerable:	Drupal OpenID 5.x-1.2 Drupal Drupal 6.9 Drupal Drupal 6.7 Drupal Drupal 6.6 Drupal Drupal 6.5 Drupal Drupal 6.4 Drupal Drupal 6.3 Drupal Drupal 6.2 Drupal Drupal 6.13 Drupal Drupal 6.12 Drupal Drupal 6.11 Drupal Drupal 6.10 Drupal Drupal 6.1 Drupal Drupal 6.0

Not Vulnerable:	Drupal OpenID 5.x-1.3 Drupal Drupal 6.14

Discussion

Drupal OpenID Module Access Validation and Security Bypass Vulnerabilities

The Drupal OpenID module is prone to an access-validation vulnerability and a security-bypass vulnerability.

Attackers may exploit these issues to gain unauthorized access to user accounts or to bypass intended security restrictions and attempt cross-site request-forgery attacks. Other attacks may also be possible.

The following are vulnerable:

Drupal OpenID Module 5.x-1.x prior to 5.x-1.3
Drupal 6.x prior to 6.14

Exploit / POC

Drupal OpenID Module Access Validation and Security Bypass Vulnerabilities

An attacker can exploit these issues via a browser. For some attacks, the attacker must entice an unsuspecting victim to follow a malicious URI.

Solution / Fix

Drupal OpenID Module Access Validation and Security Bypass Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Drupal Drupal 6.7