OSVDB ID: 82466

Title: BrowserID Module for Drupal BrowserID / Mozilla Persona audience Identifier Authentication Login Spoofing

Info

Disclosure

May 23, 2012

Discovery

Unknown

Dates

Exploit

Unknown

Solution

May 23, 2012

Description

BrowserID Module for Drupal contains a flaw that is triggered when handling the authentication of a BrowserID or Mozilla persona "audience" identifier. This may allow an attacker to spoof the login by modifying the "audience" identifier after visiting malicious website.

Classification

Location: Remote / Network Access
Attack Type: Authentication Management
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: Vendor Verified
OSVDB: Web Related

Solution

Upgrade to version 7.x-1.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Isaac Sukin

BrowserID Module for Drupal

7.x-1.2

References

CVE ID: 2012-2713 (see also: NVD)
Secunia Advisory ID: 49227
Bugtraq ID: 53673
ISS X-Force ID: 75869
Vendor Specific Advisory URL: http://drupal.org/node/1597414
Vendor Specific News/Changelog Entry: http://drupalcode.org/project/browserid.git/commitdiff/5e5cdcd
https://drupal.org/node/1596464
Packet Storm: http://packetstormsecurity.org/files/112997/Drupal-BrowserID-7.x-Cross-Site-Request-Forgery.html
Other Advisory URL: http://www.openwall.com/lists/oss-security/2012/06/14/3

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/82466