Back to feed
EUVD-2009-4493 · Published Dec 31, 2009
The Shibboleth authentication module 5.x before 5.x-3.4 and 6.x before 6.x-3.2, a module for Drupal, does not properly remove statically granted privileges after a logout or other session change, which allows physically proximate attackers to gain privileges by using an unattended web browser.
Technologies
Niif Shib AuthDrupal Drupal
Weaknesses
CWE-264
CVSS scores
- v2.04.6
AV:L/AC:L/Au:N/C:P/I:P/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Privilege Escalation
References
Potentially impacted assets
See if this affects your attack surface
