high7.5
CVE-2009-4044
The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to make unspecified use of an API via unknow…
Impact
The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to make unspecified use of an API via unknown vectors.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bruno Massa | Web Services | Version 6.x-1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://drupal.org/node/630244
- http://www.securityfocus.com/bid/37000
- http://www.vupen.com/english/advisories/2009/3218
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54249
- http://drupal.org/node/630244
- http://www.securityfocus.com/bid/37000
- http://www.vupen.com/english/advisories/2009/3218
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54249