Unscored CVE-2007-1652 EUVD-2007-1646GHSA-3x88-xvgr-m6fg

OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, an…

Published Mar 24, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list via a crafted web page, related to cached tokens.

References

[security] 20070321 MyOpenID mailing-list
[security] 20070321 MyOpenID mailing-list
[security] 20070321 MyOpenID mailing-list
[security] 20070322 MyOpenID mailing-list
http://janrain.com/blog/2007/03/22/myopenid-security-fix/
43601 vdb-entry
[security] 20070321 MyOpenID mailing-list