7.5

CVE-2008-6908

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, uses an insecure hash when signing requests, which allows remote attackers to impersonate other users and gain privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Marc Ingram ≫ Services Version 5.x-0.9
   Drupal ≫ Drupal
Marc Ingram ≫ Services Version 5.x-0.91
   Drupal ≫ Drupal
Marc Ingram ≫ Services Version 5.x-1.x-dev
   Drupal ≫ Drupal
Marc Ingram ≫ Services Version 6.x-0.9
   Drupal ≫ Drupal
Marc Ingram ≫ Services Version 6.x-0.11
   Drupal ≫ Drupal
Marc Ingram ≫ Services Version 6.x-0.12
   Drupal ≫ Drupal
Marc Ingram ≫ Services Version 6.x-1.x-dev
   Drupal ≫ Drupal
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.36% 0.681
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://drupal.org/node/348295
Patch
Vendor Advisory
http://osvdb.org/50743
http://www.securityfocus.com/bid/32894
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/47458