Description
The Web Services module 6.x for Drupal does not perform the expected access control, which allows remote attackers to make unspecified use of an API via unknown vectors.
References
- http://drupal.org/node/630244
- webservices-unspecified-security-bypass(54249) vdb-entry
- ADV-2009-3218 vdb-entry
- 37000 vdb-entry