Oval Definition:oval:org.mitre.oval:def:22156
Revision Date:2014-06-23Version:5
Title:DSA-2851-1 drupal6 - impersonation
Description:Christian Maink a and Vladislav Mladenov reported a vulnerability in the OpenID module of Drupal, a fully-featured content management framework. A malicious user could exploit this flaw to log in as other users on the site, including administrators, and hijack their accounts.
Family:unixClass:patch
Status:ACCEPTEDReference(s):CVE-2014-1475
DSA-2851-1
Platform(s):Debian GNU/kFreeBSD 6.0
Debian GNU/Linux 6.0
Product(s):drupal6
Definition Synopsis
  • Debian 6.0 is installed
  • AND GNU/Linux or GNU/kFreeBSD kernel
  • Debian GNU/Linux is installed
  • OR Debian GNU/kFreeBSD is installed
  • AND drupal6 DPKG is earlier than 0:6.30-1
  • BACK