The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to make unspecified use of an API via unknown vectors.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Web_services | Bruno_massa | 6.x-1.0 (including) | 6.x-1.0 (including) |
References
- http://drupal.org/node/630244
- http://www.securityfocus.com/bid/37000
- http://www.vupen.com/english/advisories/2009/3218
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54249
- http://drupal.org/node/630244
- http://www.securityfocus.com/bid/37000
- http://www.vupen.com/english/advisories/2009/3218
- https://exchange.xforce.ibmcloud.com/vulnerabilities/54249