Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Shibboleth authentication module 5.x before 5.x-3.4 and 6.x before 6.x-3.2, a module for Drupal, does not properly remove statically granted privileges after a logout or other session change, which allows physically proximate attackers to gain privileges by using an unattended web browser.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Niif Shibboleth验证模块身份认证绕过漏洞
Vulnerability Description
Shibboleth验证模块中,Drupal的一个模数在登出或其他会谈变化时不能正确删除静态授权特权，附近的攻击者可以借助一个未连接的web浏览器获得特权。
CVSS Information
N/A
Vulnerability Type
N/A