Lucene search
RedhatCVE-2011-4302HistoryJul 11, 2012 - 10:26 a.m.
CVE-2011-4302
2012-07-1110:26:10
CWE-20
redhat
web.nvd.nist.gov
30
moodle
mnet
xmlrpc
remote validation bypass
cve-2011-4302
security vulnerability
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.6
Confidence
Low
EPSS
0.005
Percentile
77.2%
mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate.
Affected configurations
Node
moodlemoodleMatch1.9.2
ORmoodlemoodleMatch1.9.3
ORmoodlemoodleMatch1.9.4
ORmoodlemoodleMatch1.9.5
ORmoodlemoodleMatch1.9.6
ORmoodlemoodleMatch1.9.7
ORmoodlemoodleMatch1.9.8
ORmoodlemoodleMatch1.9.9
ORmoodlemoodleMatch1.9.10
ORmoodlemoodleMatch1.9.11
ORmoodlemoodleMatch1.9.12
ORmoodlemoodleMatch1.9.13
ORmoodlemoodleMatch2.0.0
ORmoodlemoodleMatch2.0.1
ORmoodlemoodleMatch2.0.2
ORmoodlemoodleMatch2.0.3
ORmoodlemoodleMatch2.0.4
ORmoodlemoodleMatch2.1.0
ORmoodlemoodleMatch2.1.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| moodle | moodle | 1.9.2 | cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.3 | cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.4 | cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.5 | cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.6 | cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.7 | cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.8 | cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.9 | cpe:2.3:a:moodle:moodle:1.9.9:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.10 | cpe:2.3:a:moodle:moodle:1.9.10:*:*:*:*:*:*:* |
| moodle | moodle | 1.9.11 | cpe:2.3:a:moodle:moodle:1.9.11:*:*:*:*:*:*:* |
Related
prion
prion
Input validation
2012-07-11 10:26:00
cvelist
cvelist
CVE-2011-4302
2012-07-11 10:00:00
ubuntucve
ubuntucve
CVE-2011-4302
2012-07-11 00:00:00
nvd
nvd
CVE-2011-4302
2012-07-11 10:26:10
openvas
openvas
Debian: Security Advisory (DSA-2338-1)
2012-02-11 00:00:00
nessus
nessus
Moodle 1.9.x < 1.9.14 Multiple Vulnerabilities
2015-04-20 00:00:00
Moodle 2.0.x < 2.0.5 / 2.1.x < 2.1.2 Multiple Vulnerabilities
2015-04-20 00:00:00
osv
osv
moodle - several
2011-11-07 00:00:00
CVSS2
6.8
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
AI Score
6.6
Confidence
Low
EPSS
0.005
Percentile
77.2%
Related for CVE-2011-4302