CVE-2009-2035

Unspecified vulnerability in Services 6.x before 6.x-0.14, a module for Drupal, when key-based access is enabled, allows remote attackers to read or add keys and access unauthorized services via unspecified vectors.

Score

CVSS 2.0 6.4 Medium

Status

Modified - cve@mitre.org

Published

2009-06-12

Last modified

2024-09-16

Affected products

• Services Module For Drupal (Drupal)

References

• http://drupal.org/node/487784
• http://drupal.org/node/488004
• http://osvdb.org/54999
• http://secunia.com/advisories/33371
• http://www.securityfocus.com/bid/35292