CVE-2007-1652: High severity Openid OpenID vulnerability
OpenID allows remote attackers to forcibly log a user into an OpenID enabled site, divulge the user's personal information to this site, and add it site to the trusted sites list via a crafted web page, related to cached tokens.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1652?
CVE-2007-1652 is classified as a medium severity vulnerability.
How do I fix CVE-2007-1652?
To fix CVE-2007-1652, it is recommended to update to the latest version of the OpenID implementation that addresses this vulnerability.
What does CVE-2007-1652 allow attackers to do?
CVE-2007-1652 allows attackers to forcibly log users into OpenID enabled sites and disclose their personal information.
Who is affected by CVE-2007-1652?
CVE-2007-1652 affects users of OpenID implementations that utilize cached tokens.
What can be done to mitigate the risks of CVE-2007-1652?
Mitigation strategies for CVE-2007-1652 include implementing strict token management and educating users about the risks of clicking on untrusted links.