Drupal HybridAuth Social Login Information Disclosure Vulnerability
BID:74364
Info
Drupal HybridAuth Social Login Information Disclosure Vulnerability
| Bugtraq ID: | 74364 |
| Class: | Design Error |
| CVE: |
CVE-2015-4395 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 22 2015 12:00AM |
| Updated: | Jul 15 2015 12:32AM |
| Credit: | Owen Kelly and Mike Goulding |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Drupal HybridAuth Social Login Information Disclosure Vulnerability
The HybridAuth Social Login module for Drupal is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to disclose sensitive information. Information obtained may lead to further attacks.
HybridAuth Social Login 7.x-2.0 to 7.x-2.9 are vulnerable.
The HybridAuth Social Login module for Drupal is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to disclose sensitive information. Information obtained may lead to further attacks.
HybridAuth Social Login 7.x-2.0 to 7.x-2.9 are vulnerable.
Exploit / POC
Drupal HybridAuth Social Login Information Disclosure Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Drupal HybridAuth Social Login Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Drupal HybridAuth Social Login Information Disclosure Vulnerability
References:
References:
- Drupal Homepage (Drupal)