Vulnerabilities > CVE-2007-1652 - Remote Security vulnerability in OpenID

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
PARTIAL
network
low complexity
openid
NVD
Published: 2007-03-24
Updated: 2008-11-13

Summary

OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list via a crafted web page, related to cached tokens.

Vulnerable Configurations

Part Description Count
Application
Openid
1

References