CVE-2010-3686

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-09-29 · updated 2026-06-16
Weakness: CWE-287

Description

The OpenID module in Drupal 6.x before 6.18, and the OpenID module 5.x before 5.x-1.4 for Drupal, violates the OpenID 2.0 protocol by not ensuring that fields are signed, which allows remote attackers to bypass authentication by leveraging an assertion from an OpenID provider.

Affected products

Drupal: 6.0, 6.0-beta1, 6.0-beta2, 6.0-beta3, 6.0-beta4, 6.0-dev (+21)
Peter Wolanin Openid: 5.x-1.0, 5.x-1.1, 5.x-1.2, 5.x-1.3, 5.x-1.x-dev

References

http://drupal.org/node/880476
http://drupal.org/node/880480
http://marc.info/?l=oss-security&m=128418560705305&w=2
http://marc.info/?l=oss-security&m=128440896914512&w=2
http://www.debian.org/security/2010/dsa-2113
http://www.securityfocus.com/bid/42388
http://drupal.org/node/880476
http://drupal.org/node/880480
http://marc.info/?l=oss-security&m=128418560705305&w=2
http://marc.info/?l=oss-security&m=128440896914512&w=2
http://www.debian.org/security/2010/dsa-2113
http://www.securityfocus.com/bid/42388

Get alerted when CVE-2010-3686 or the next vulnerability affects your stack