// For flags

CVE-2008-6909

 

Severity Score

6.5
*CVSS v2

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

0
*Multiple Sources

Exploited in Wild

-
*KEV

Decision

-
*SSVC
Descriptions

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not sign all required data in requests, which has unspecified impact, probably related to man-in-the-middle attacks that modify critical data and allow remote attackers to impersonate other users and gain privileges.

El Modulo Services v5.x anterior a v5.x-0.92 y v6.x anterior a v6.x-0.13 para Drupal, no firma todos los datos necesarios en las peticiones, cuyo impacto se desconoce, probablemente relacionado con ataques de hombre-en-el-medio (man-in-the-middle)que modifican datos críticos y permiten a atacantes remotos suplantar a otros usuarios y obtener privilegios.

*Credits: N/A
CVSS Scores
Attack Vector
Network
Attack Complexity
Low
Authentication
Single
Confidentiality
Partial
Integrity
Partial
Availability
Partial
* Common Vulnerability Scoring System
SSVC
  • Decision:-
Exploitation
-
Automatable
-
Tech. Impact
-
* Organization's Worst-case Scenario
Timeline
  • 2009-08-06 CVE Reserved
  • 2009-08-06 CVE Published
  • 2023-09-24 EPSS Updated
  • 2024-08-07 CVE Updated
  • ---------- Exploited in Wild
  • ---------- KEV Due Date
  • ---------- First Exploit
CWE
  • CWE-310: Cryptographic Issues
CAPEC
Affected Vendors, Products, and Versions
Vendor Product Version Other Status
Vendor Product Version Other Status <-- --> Vendor Product Version Other Status
Marc Ingram
Search vendor "Marc Ingram"
Services
Search vendor "Marc Ingram" for product "Services"
5.x-0.9
Search vendor "Marc Ingram" for product "Services" and version "5.x-0.9"
-
Affected
in Drupal
Search vendor "Drupal"
Drupal
Search vendor "Drupal" for product "Drupal"
*-
Safe
Marc Ingram
Search vendor "Marc Ingram"
Services
Search vendor "Marc Ingram" for product "Services"
5.x-0.91
Search vendor "Marc Ingram" for product "Services" and version "5.x-0.91"
-
Affected
in Drupal
Search vendor "Drupal"
Drupal
Search vendor "Drupal" for product "Drupal"
*-
Safe
Marc Ingram
Search vendor "Marc Ingram"
Services
Search vendor "Marc Ingram" for product "Services"
5.x-1.x-dev
Search vendor "Marc Ingram" for product "Services" and version "5.x-1.x-dev"
-
Affected
in Drupal
Search vendor "Drupal"
Drupal
Search vendor "Drupal" for product "Drupal"
*-
Safe
Marc Ingram
Search vendor "Marc Ingram"
Services
Search vendor "Marc Ingram" for product "Services"
6.x-0.9
Search vendor "Marc Ingram" for product "Services" and version "6.x-0.9"
-
Affected
in Drupal
Search vendor "Drupal"
Drupal
Search vendor "Drupal" for product "Drupal"
*-
Safe
Marc Ingram
Search vendor "Marc Ingram"
Services
Search vendor "Marc Ingram" for product "Services"
6.x-0.11
Search vendor "Marc Ingram" for product "Services" and version "6.x-0.11"
-
Affected
in Drupal
Search vendor "Drupal"
Drupal
Search vendor "Drupal" for product "Drupal"
*-
Safe
Marc Ingram
Search vendor "Marc Ingram"
Services
Search vendor "Marc Ingram" for product "Services"
6.x-0.12
Search vendor "Marc Ingram" for product "Services" and version "6.x-0.12"
-
Affected
in Drupal
Search vendor "Drupal"
Drupal
Search vendor "Drupal" for product "Drupal"
*-
Safe
Marc Ingram
Search vendor "Marc Ingram"
Services
Search vendor "Marc Ingram" for product "Services"
6.x-1.x-dev
Search vendor "Marc Ingram" for product "Services" and version "6.x-1.x-dev"
-
Affected
in Drupal
Search vendor "Drupal"
Drupal
Search vendor "Drupal" for product "Drupal"
*-
Safe