CVE-2014-9151

The Services module 7.x-3.x before 7.x-3.10 for Drupal does not properly limit the rate of authentication attempts, which makes it easier for remote attackers…

published December 1, 2014

CVSS
—
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

The Services module 7.x-3.x before 7.x-3.10 for Drupal does not properly limit the rate of authentication attempts, which makes it easier for remote attackers to obtain access via a brute-force attack on the administrative password.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01399 · 72.1th percentile
Published
2014-12-01T16:00Z
EPSS history
Timeline
  • 01 DEC 16:00Z
    The Services module 7.x-3.x before 7.x-3.10 for Drupal does not properly limit the rate of authentication attempts, which makes it easier for remote attackers…
    cvelistv5