Drupal Shibboleth Authentication Module CVE-2015-3375 Cross Site Request Forgery Vulnerability
BID:74276
Info
Drupal Shibboleth Authentication Module CVE-2015-3375 Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 74276 |
| Class: | Input Validation Error |
| CVE: |
CVE-2015-3375 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 21 2015 12:00AM |
| Updated: | Jan 21 2015 12:00AM |
| Credit: | Pere Orga |
| Vulnerable: |
Drupal Shibboleth authentication 7.x-4.0 Drupal Shibboleth authentication 6.x-4.0 |
| Not Vulnerable: |
Drupal Shibboleth authentication 7.x-4.1 Drupal Shibboleth authentication 6.x-4.1 |
Discussion
Drupal Shibboleth Authentication Module CVE-2015-3375 Cross Site Request Forgery Vulnerability
The Shibboleth Authentication module for Drupal is prone to a cross-site request-forgery vulnerability.
An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
The Shibboleth Authentication module for Drupal is prone to a cross-site request-forgery vulnerability.
An attacker can exploit this issue to perform certain unauthorized actions and gain access to the affected application. Other attacks are also possible.
Solution / Fix
Drupal Shibboleth Authentication Module CVE-2015-3375 Cross Site Request Forgery Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.