PT-2009-6225 · Drupal · Drupal Services Module

Publicado 2009-11-20 · Atualizado 2017-08-17 · CVE-2009-4044

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Drupal Web Services module version 6.x

Description The issue concerns the Web Services module for Drupal, which fails to enforce proper access control. This allows remote attackers to exploit an API, although the specific vectors used are not detailed.

Recommendations For Drupal Web Services module version 6.x, update the module to a version that includes the necessary access control fixes.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2009-4044

Produtos afetados

Drupal Services Module

Referências · 5

• http://vupen.com/english/advisories/2009/3218 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2009-4044 · Nota de Segurança
• http://drupal.org/node/630244 · Aviso do Fabricante
• http://securityfocus.com/bid/37000 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/54249 · Nota