Description
Services 5.x before 5.x-0.92 and 6.x before 6.x-0.13, a module for Drupal, uses an insecure hash when signing requests, which allows remote attackers to impersonate other users and gain privileges.
References
- 50743 vdb-entry
- 32894 vdb-entry
- http://drupal.org/node/348295
- services-insecure-hash-weak-security(47458) vdb-entry