CVE-2014-9152

The _user_resource_create function in the Services module 7.x-3.x before 7.x-3.10 for Drupal uses a password of 1 when creating new user accounts, which makes…

published December 1, 2014

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

The _user_resource_create function in the Services module 7.x-3.x before 7.x-3.10 for Drupal uses a password of 1 when creating new user accounts, which makes it easier for remote attackers to guess the password via a brute force attack.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02331 · 83.3th percentile
Published
2014-12-01T16:00Z
EPSS history
Timeline
  • 01 DEC 16:00Z
    The _user_resource_create function in the Services module 7.x-3.x before 7.x-3.10 for Drupal uses a password of 1 when creating new user accounts, which makes…
    cvelistv5