Vulnerability Name:

CVE-2014-2685 (CCN-92093)

Assigned:2014-03-21
Published:2014-03-21
Updated:2017-11-04
Summary:The GenericConsumer class in the Consumer component in ZendOpenId before 2.0.2 and the Zend_OpenId_Consumer class in Zend Framework 1 before 1.12.4 violate the OpenID 2.0 protocol by ensuring only that at least one field is signed, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider.
CVSS v3 Severity:5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)
Exploitability Metrics:Attack Vector (AV): Network
Attack Complexity (AC): Low
Privileges Required (PR): None
User Interaction (UI): None
Scope:Scope (S): Unchanged
Impact Metrics:Confidentiality (C): None
Integrity (I): Low
Availibility (A): None
CVSS v2 Severity:7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
5.5 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Authentication (Au): None
Impact Metrics:Confidentiality (C): Partial
Integrity (I): Partial
Availibility (A): Partial
5.0 Medium (CCN CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N)
3.7 Low (CCN Temporal CVSS v2 Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N/E:U/RL:OF/RC:C)
Exploitability Metrics:Access Vector (AV): Network
Access Complexity (AC): Low
Athentication (Au): None
Impact Metrics:Confidentiality (C): None
Integrity (I): Partial
Availibility (A): None
Vulnerability Type:CWE-287
Vulnerability Consequences:Bypass Security
References:Source: CONFIRM
Type: UNKNOWN
http://advisories.mageia.org/MGASA-2014-0151.html

Source: MITRE
Type: CNA
CVE-2014-2685

Source: CCN
Type: ZF2014-02
Potential security issue in login mechanism of ZendOpenId and Zend_OpenId consumer

Source: CONFIRM
Type: Vendor Advisory
http://framework.zend.com/security/advisory/ZF2014-02

Source: MLIST
Type: UNKNOWN
[oss-security] 20140331 CVE requests: Zend Framework issues fixed in ZF2014-01 and ZF2014-02

Source: CCN
Type: SA57276
Zend Framework XML External Entities and Security Bypass Vulnerabilities

Source: DEBIAN
Type: UNKNOWN
DSA-3265

Source: MANDRIVA
Type: UNKNOWN
MDVSA-2014:072

Source: BID
Type: UNKNOWN
66358

Source: CCN
Type: BID-66358
Zend Framework Multiple Information Disclosure and Security Bypass Vulnerabilities

Source: XF
Type: UNKNOWN
zend-framework-zendopenid-sec-bypass(92093)

Vulnerable Configuration:Configuration 1:
  • cpe:/a:zend:zend_framework:1.0.0:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.0.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.0.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.0.0:rc2a:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.0.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.0.1:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.0.2:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.0.3:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.0.4:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.5.0:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.5.0:pl:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.5.0:pr:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.5.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.5.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.5.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.5.1:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.5.2:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.5.3:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.6.0:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.6.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.6.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.6.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.6.1:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.6.2:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.0:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.0:pl1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.0:pr:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.1:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.2:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.3:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.3:pl1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.4:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.5:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.6:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.7:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.8:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.7.9:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.8.0:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.8.0:a1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.8.0:b1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.8.1:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.8.2:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.8.3:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.8.4:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.8.4:pl1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.8.5:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.0:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.0:a1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.0:b1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.1:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.2:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.3:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.3:pl1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.4:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.5:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.6:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.7:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.9.8:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.0:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.0:alpha1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.0:beta1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.1:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.2:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.3:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.4:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.5:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.6:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.7:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.8:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.10.9:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.0:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.0:b1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.1:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.2:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.3:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.4:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.5:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.6:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.7:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.8:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.9:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.10:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.11:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.12:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.11.13:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.12.0:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.12.0:rc1:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.12.0:rc2:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.12.0:rc3:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.12.0:rc4:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.12.1:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:1.12.2:*:*:*:*:*:*:*
  • OR cpe:/a:zend:zend_framework:*:*:*:*:*:*:*:* (Version <= 1.12.3)

  • Configuration 2:
  • cpe:/a:zend:zendopenid:*:*:*:*:*:*:*:* (Version <= 2.0.1)

  • Configuration CCN 1:
  • cpe:/a:zend:zend_framework:1.12.3:*:*:*:*:*:*:*

  • * Denotes that component is vulnerable
    Oval Definitions
    Definition IDClassTitleLast Modified
    oval:org.cisecurity:def:69
    P
    DSA-3265-1 -- zendframework -- security update
    2016-02-08
    BACK
    zend zend framework 1.0.0
    zend zend framework 1.0.0 rc1
    zend zend framework 1.0.0 rc2
    zend zend framework 1.0.0 rc2a
    zend zend framework 1.0.0 rc3
    zend zend framework 1.0.1
    zend zend framework 1.0.2
    zend zend framework 1.0.3
    zend zend framework 1.0.4
    zend zend framework 1.5.0
    zend zend framework 1.5.0 pl
    zend zend framework 1.5.0 pr
    zend zend framework 1.5.0 rc1
    zend zend framework 1.5.0 rc2
    zend zend framework 1.5.0 rc3
    zend zend framework 1.5.1
    zend zend framework 1.5.2
    zend zend framework 1.5.3
    zend zend framework 1.6.0
    zend zend framework 1.6.0 rc1
    zend zend framework 1.6.0 rc2
    zend zend framework 1.6.0 rc3
    zend zend framework 1.6.1
    zend zend framework 1.6.2
    zend zend framework 1.7.0
    zend zend framework 1.7.0 pl1
    zend zend framework 1.7.0 pr
    zend zend framework 1.7.1
    zend zend framework 1.7.2
    zend zend framework 1.7.3
    zend zend framework 1.7.3 pl1
    zend zend framework 1.7.4
    zend zend framework 1.7.5
    zend zend framework 1.7.6
    zend zend framework 1.7.7
    zend zend framework 1.7.8
    zend zend framework 1.7.9
    zend zend framework 1.8.0
    zend zend framework 1.8.0 a1
    zend zend framework 1.8.0 b1
    zend zend framework 1.8.1
    zend zend framework 1.8.2
    zend zend framework 1.8.3
    zend zend framework 1.8.4
    zend zend framework 1.8.4 pl1
    zend zend framework 1.8.5
    zend zend framework 1.9.0
    zend zend framework 1.9.0 a1
    zend zend framework 1.9.0 b1
    zend zend framework 1.9.0 rc1
    zend zend framework 1.9.1
    zend zend framework 1.9.2
    zend zend framework 1.9.3
    zend zend framework 1.9.3 pl1
    zend zend framework 1.9.4
    zend zend framework 1.9.5
    zend zend framework 1.9.6
    zend zend framework 1.9.7
    zend zend framework 1.9.8
    zend zend framework 1.10.0
    zend zend framework 1.10.0 alpha1
    zend zend framework 1.10.0 beta1
    zend zend framework 1.10.0 rc1
    zend zend framework 1.10.1
    zend zend framework 1.10.2
    zend zend framework 1.10.3
    zend zend framework 1.10.4
    zend zend framework 1.10.5
    zend zend framework 1.10.6
    zend zend framework 1.10.7
    zend zend framework 1.10.8
    zend zend framework 1.10.9
    zend zend framework 1.11.0
    zend zend framework 1.11.0 b1
    zend zend framework 1.11.0 rc1
    zend zend framework 1.11.1
    zend zend framework 1.11.2
    zend zend framework 1.11.3
    zend zend framework 1.11.4
    zend zend framework 1.11.5
    zend zend framework 1.11.6
    zend zend framework 1.11.7
    zend zend framework 1.11.8
    zend zend framework 1.11.9
    zend zend framework 1.11.10
    zend zend framework 1.11.11
    zend zend framework 1.11.12
    zend zend framework 1.11.13
    zend zend framework 1.12.0
    zend zend framework 1.12.0 rc1
    zend zend framework 1.12.0 rc2
    zend zend framework 1.12.0 rc3
    zend zend framework 1.12.0 rc4
    zend zend framework 1.12.1
    zend zend framework 1.12.2
    zend zend framework *
    zend zendopenid *
    zend zend framework 1.12.3