Drupalauth Project: Security Vulnerabilities
lib/Auth/Source/External.php in the drupalauth module before 1.2.2 for simpleSAMLphp allows remote attackers to authenticate as an arbitrary user via the user name (uid) in a cookie.
CVSS Score
7.5
EPSS Score
0.005
Published
2014-05-13