Lucene search
RedhatCVE-2011-4283HistoryJul 16, 2012 - 10:28 a.m.
CVE-2011-4283
2012-07-1610:28:36
CWE-200
redhat
web.nvd.nist.gov
27
4
cve-2011-4283
moodle
information security
vulnerability
attack
ims enterprise
enrolment file
remote attack
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.1
Confidence
Low
EPSS
0.003
Percentile
70.3%
Moodle 1.9.x before 1.9.11 and 2.0.x before 2.0.2 places an IMS enterprise enrolment file in the course-files area, which allows remote attackers to obtain sensitive information via a request for imsenterprise-enrol.xml.
Affected configurations
Node
moodlemoodleMatch1.9.1
ORmoodlemoodleMatch1.9.2
ORmoodlemoodleMatch1.9.3
ORmoodlemoodleMatch1.9.4
ORmoodlemoodleMatch1.9.5
ORmoodlemoodleMatch1.9.6
ORmoodlemoodleMatch1.9.7
ORmoodlemoodleMatch1.9.8
ORmoodlemoodleMatch1.9.9
ORmoodlemoodleMatch1.9.10
ORmoodlemoodleMatch2.0.0
ORmoodlemoodleMatch2.0.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| moodle | moodle | 1.9.1 | cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.2 | cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.3 | cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.4 | cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.5 | cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.6 | cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.7 | cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.8 | cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.9 | cpe:2.3:a:moodle:moodle:1.9.9:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.10 | cpe:2.3:a:moodle:moodle:1.9.10:*:*:*:*:*:*:* |
References
Social References
More
Related
nvd
nvd
CVE-2011-4283
2012-07-16 10:28:36
cvelist
cvelist
CVE-2011-4283
2012-07-16 10:00:00
ubuntucve
ubuntucve
CVE-2011-4283
2012-07-16 00:00:00
prion
prion
Cross site request forgery (csrf)
2012-07-16 10:28:00
nessus
nessus
Moodle 1.9.x < 1.9.11 Multiple Vulnerabilities
2015-04-20 00:00:00
Moodle 2.0.x < 2.0.2 Multiple Vulnerabilities
2015-04-20 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2262-1)
2011-08-03 00:00:00
Debian Security Advisory DSA 2262-1 (moodle)
2011-08-03 00:00:00
Debian: Security Advisory (DSA-2262-1)
2011-08-03 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6.1
Confidence
Low
EPSS
0.003
Percentile
70.3%
Related for CVE-2011-4283