CVE-2008-6910: High severity drupal vulnerability
Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, does not use timeouts for signed requests, which allows remote attackers to impersonate other users and gain privileges via a replay attack that sends the same request.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-6910?
CVE-2008-6910 is considered a medium to high severity vulnerability due to its potential for user impersonation and privilege escalation.
How do I fix CVE-2008-6910?
To fix CVE-2008-6910, update the Marc Ingram Services module to version 5.x-0.92 or 6.x-0.13 or later.
What are the affected versions in CVE-2008-6910?
The affected versions in CVE-2008-6910 include Marc Ingram Services 5.x before 0.92 and 6.x before 0.13.
What can attackers do with CVE-2008-6910?
Attackers can exploit CVE-2008-6910 to impersonate other users and gain unauthorized privileges through replay attacks.
Is this vulnerability specific to certain Drupal versions?
CVE-2008-6910 specifically affects the Marc Ingram Services module used with Drupal versions prior to the specified updates.