drupalauth Module For SimpleSAMLphp Security Bypass Vulnerability
BID:63537
Info
drupalauth Module For SimpleSAMLphp Security Bypass Vulnerability
| Bugtraq ID: | 63537 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 05 2013 12:00AM |
| Updated: | Nov 05 2013 12:00AM |
| Credit: | Alan Barrett |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
drupalauth Module For SimpleSAMLphp Security Bypass Vulnerability
drupalauth module is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to impersonate other users by manipulation the cookie value. This may lead to further attacks.
drupalauth module is prone to an authentication-bypass vulnerability.
An attacker can exploit this issue to impersonate other users by manipulation the cookie value. This may lead to further attacks.
Exploit / POC
drupalauth Module For SimpleSAMLphp Security Bypass Vulnerability
An attacker can use readily available tools to exploit this issue.
An attacker can use readily available tools to exploit this issue.
Solution / Fix
drupalauth Module For SimpleSAMLphp Security Bypass Vulnerability
Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.
Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.
References
drupalauth Module For SimpleSAMLphp Security Bypass Vulnerability
References:
References: