CVE-2014-9151

CVE-2014-9151 affects Drupal’s Services module (7.x-3.x) prior to 7.x-3.10. The vulnerability is due to insufficient flood control / rate limiting on authentication attempts, allowing remote attackers to brute-force the administrative password. The issue is addressed by upgrading to Services 7.x-...