CVE-2012-4494 The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allows remote blocked users to access bypass intended access restrictions and possibly...
MediumCVSS 4.3
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allows remote blocked users to access bypass intended access restrictions and possibly have other impacts by logging in.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| niif shibb auth | = 7.x-4.0 | No fix listed |
References
- drupal.org
- drupal.org vendor-advisory
- drupalcode.org
- [oss-security] 20121004 CVE Request for Drupal Contributed Modules mailing-list
- [oss-security] 20121007 Re: CVE Request for Drupal Contributed Modules mailing-list