VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 6, 2009· Updated Jun 16, 2026

CVE-2008-6909

CVE-2008-6909

Description

Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not sign all required data in requests, which has unspecified impact, probably related to man-in-the-middle attacks that modify critical data and allow remote attackers to impersonate other users and gain privileges.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

8
  • Marc Ingram/Services7 versions
    cpe:2.3:a:marc_ingram:services:5.x-0.9:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:marc_ingram:services:5.x-0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:marc_ingram:services:5.x-0.91:*:*:*:*:*:*:*
    • cpe:2.3:a:marc_ingram:services:5.x-1.x-dev:*:*:*:*:*:*:*
    • cpe:2.3:a:marc_ingram:services:6.x-0.11:*:*:*:*:*:*:*
    • cpe:2.3:a:marc_ingram:services:6.x-0.12:*:*:*:*:*:*:*
    • cpe:2.3:a:marc_ingram:services:6.x-0.9:*:*:*:*:*:*:*
    • cpe:2.3:a:marc_ingram:services:6.x-1.x-dev:*:*:*:*:*:*:*
  • Drupal/Servicesllm-fuzzy
    Range: 5.x before 5.x-0.92, 6.x before 6.x-0.13

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.