The Shibboleth authentication module 7.x-4.0 for Drupal does not properly check the active status of users, which allows remote blocked users to access bypass intended access restrictions and possibly have other impacts by logging in.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Shibb_auth | Niif | 7.x-4.0 (including) | 7.x-4.0 (including) |