CVE-2008-6909

2009-08-0618:00:00

mitre

www.cve.org

6.9 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

57.6%

JSON

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not sign all required data in requests, which has unspecified impact, probably related to man-in-the-middle attacks that modify critical data and allow remote attackers to impersonate other users and gain privileges.