Lucene search
PRIOn knowledge basePRION:CVE-2014-9152HistoryDec 01, 2014 - 4:59 p.m.
Default credentials
2014-12-0116:59:00
PRIOn knowledge base
www.prio-n.com
1
The _user_resource_create function in the Services module 7.x-3.x before 7.x-3.10 for Drupal uses a password of 1 when creating new user accounts, which makes it easier for remote attackers to guess the password via a brute force attack.
| CPE | Name | Operator | Version |
|---|---|---|---|
| services | eq | <= 7.x-3.9 |
Related
cve
cve
CVE-2014-9152
2022-10-03 16:20:41
cvelist
cvelist
CVE-2014-9152
2022-10-03 16:20:41
nvd
nvd
CVE-2014-9152
2014-12-01 16:59:02
drupal
drupal
SA-CONTRIB-2014-092 - Services - Cross Site Scripting, Access bypass
2014-09-24 00:00:00