CVEvulnerability
CVE-2009-4044
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-11-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to make unspecified use of an API via unknown vectors.
Affected configurations
• bruno massa web services 6.x-1.0
Related
Weakness · not in database (1)
References
- http://drupal.org/node/630244 Vendor Advisory
- http://www.securityfocus.com/bid/37000 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3218 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54249 exchange.xforce.ibmcloud.com
- http://drupal.org/node/630244 Vendor Advisory
- http://www.securityfocus.com/bid/37000 www.securityfocus.com
- http://www.vupen.com/english/advisories/2009/3218 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54249 exchange.xforce.ibmcloud.com