What’s Vulnerable › Vulnerabilities

CVE-2014-1475

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-01-24 · updated 2026-06-17

Description

The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authenticate as other users via unspecified vectors.

Affected products

• Drupal: 7.0, 7.0-alpha1, 7.0-alpha2, 7.0-alpha3, 7.0-alpha4, 7.0-alpha5 (+62)

References

• http://secunia.com/advisories/56260
• http://secunia.com/advisories/56601
• http://www.debian.org/security/2014/dsa-2847
• http://www.debian.org/security/2014/dsa-2851
• http://www.mandriva.com/security/advisories?name=MDVSA-2014:031
• http://www.securityfocus.com/bid/64973
• https://drupal.org/SA-CORE-2014-001
• http://secunia.com/advisories/56260
• http://secunia.com/advisories/56601
• http://www.debian.org/security/2014/dsa-2847
• http://www.debian.org/security/2014/dsa-2851
• http://www.mandriva.com/security/advisories?name=MDVSA-2014:031

Get alerted when CVE-2014-1475 or the next vulnerability affects your stack