Security Advisory
CVE-2015-3234
4.3
Vulnerability Description
The OpenID module in Drupal 6.x before 6.36 and 7.x before 7.38 allows remote attackers to log into other users' accounts by leveraging an OpenID identity from certain providers, as demonstrated by the Verisign, LiveJournal, and StackExchange providers.
Published Date
June 22, 2015
Official Source
NIST NVD Advisory