CVE-2008-6908

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, uses an insecure hash when signing requests, which allows remote attackers to…

published August 6, 2009

CVSS
—
EPSS
1%
Percentile
71.3
In the wild
Unconfirmed
What it is

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, uses an insecure hash when signing requests, which allows remote attackers to impersonate other users and gain privileges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01359 · 71.3th percentile
Published
2009-08-06T17:00Z
EPSS history
Timeline
  • 06 AUG 17:00Z
    Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, uses an insecure hash when signing requests, which allows remote attackers to…
    cvelistv5