CyberRota Analysis
AI analysis pending.
CVE
CVE-2015-3234
Severity
MEDIUM
CVSS
4.3
EPSS
1.88%
Exchange
Original NVD Description
The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers.