Unrated severityNVD Advisory· Published Aug 6, 2009· Updated Jun 16, 2026
CVE-2008-6908
CVE-2008-6908
Description
Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, uses an insecure hash when signing requests, which allows remote attackers to impersonate other users and gain privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9cpe:2.3:a:marc_ingram:services:5.x-0.9:*:*:*:*:*:*:*+ 6 more
- cpe:2.3:a:marc_ingram:services:5.x-0.9:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:5.x-0.91:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:5.x-1.x-dev:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-0.11:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-0.12:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-0.9:*:*:*:*:*:*:*
- cpe:2.3:a:marc_ingram:services:6.x-1.x-dev:*:*:*:*:*:*:*
Patches
Vulnerability mechanics
References
4- drupal.org/node/348295nvdPatchVendor Advisory
- www.securityfocus.com/bid/32894nvdPatch
- osvdb.org/50743nvd
- exchange.xforce.ibmcloud.com/vulnerabilities/47458nvd
News mentions
0No linked articles in our index yet.