Moole Vulnerability Database

Find real vulnerabilities before they ship

High

CVE-2015-6926

The OpenID Single Sign-On authentication functionality in OXID eShop before 4.5.0 allows remote attackers to impersonate users via the email address in a crafted authentication token.

VectorNETWORK

PublishedJan 19, 2018, 15:29

Published Bycve@mitre.org

Base Score

Score7.5

Affected Versions

Package (Ecosystem)IntroducedFixedLimit

oxid-esales/oxideshop-ce(Packagist)04.5.0N/A

References

https://bugs.oxid-esales.com/view.php?id=6224
https://oxidforge.org/en/oxid-security-bulletin-2015-001.html

Weakness Type

CWE-287

CVSS Metrics

Base Score

7.5

Vector String

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Base SeverityHigh

Version

3.1

Attack Vector (AV)

NETWORK