CVE-2014-1475

HIGH 7.5CVE-2014-1475 · Published 24/01/2014 · updated 17/06/2026

In short

CVE-2014-1475 is a HIGH (CVSS 7.5) vulnerability affecting drupal (drupal).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
drupal drupal	`= 6.0= 6.1= 6.10= 6.11= 6.12= 6.13= 6.14= 6.15= 6.16= 6.17= 6.18= 6.19= 6.2= 6.20= 6.21= 6.22= 6.23= 6.24= 6.25= 6.26= 6.27= 6.28= 7.0= 7.1= 7.10= 7.11= 7.12= 7.13= 7.14= 7.15= 7.16= 7.17= 7.18= 7.19= 7.2= 7.20= 7.21= 7.22= 7.23= 7.24`	No fix yet

Description

The OpenID module in Drupal 6.x before 6.30 and 7.x before 7.26 allows remote OpenID users to authenticate as other users via unspecified vectors.

References

secunia.com/advisories/56260 · Vendor Advisory
secunia.com/advisories/56601
debian.org/security/2014/dsa-2847
debian.org/security/2014/dsa-2851
mandriva.com/security/advisories
securityfocus.com/bid/64973
drupal.org/SA-CORE-2014-001 · Vendor Advisory

More vulnerabilities in drupal

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

drupal

= 6.0= 6.1= 6.10= 6.11= 6.12= 6.13= 6.14= 6.15= 6.16= 6.17= 6.18= 6.19= 6.2= 6.20= 6.21= 6.22= 6.23= 6.24= 6.25= 6.26= 6.27= 6.28= 7.0= 7.1= 7.10= 7.11= 7.12= 7.13= 7.14= 7.15= 7.16= 7.17= 7.18= 7.19= 7.2= 7.20= 7.21= 7.22= 7.23= 7.24

No fix yet

More vulnerabilities in drupal

See all →