Lucene search
RedhatCVE-2011-4583HistoryJul 20, 2012 - 10:40 a.m.
CVE-2011-4583
2012-07-2010:40:35
CWE-264
redhat
web.nvd.nist.gov
25
moodle
cve-2011-4583
web service
token
unauthorized access
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.003
Percentile
66.3%
Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.
Affected configurations
Node
moodlemoodleMatch2.1.0
ORmoodlemoodleMatch2.1.1
ORmoodlemoodleMatch2.1.2
Node
moodlemoodleMatch2.0.0
ORmoodlemoodleMatch2.0.1
ORmoodlemoodleMatch2.0.2
ORmoodlemoodleMatch2.0.3
ORmoodlemoodleMatch2.0.4
ORmoodlemoodleMatch2.0.5
| Vendor | Product | Version | CPE |
|---|---|---|---|
| moodle | moodle | 2.1.0 | cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.1 | cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.2 | cpe:2.3:a:moodle:moodle:2.1.2:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.0 | cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.1 | cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.2 | cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.3 | cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.4 | cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.5 | cpe:2.3:a:moodle:moodle:2.0.5:*:*:*:*:*:*:* |
Related
prion
prion
Authorization
2012-07-20 10:40:00
nvd
nvd
CVE-2011-4583
2012-07-20 10:40:35
cvelist
cvelist
CVE-2011-4583
2012-07-20 10:00:00
ubuntucve
ubuntucve
CVE-2011-4583
2012-07-20 00:00:00
fedora
fedora
[SECURITY] Fedora 15 Update: moodle-1.9.15-1.fc15
2011-12-21 17:10:35
[SECURITY] Fedora 16 Update: moodle-2.0.6-1.fc16
2011-12-21 17:11:48
openvas
openvas
Fedora Update for moodle FEDORA-2011-16833
2012-04-02 00:00:00
Fedora Update for moodle FEDORA-2011-16903
2011-12-23 00:00:00
Fedora Update for moodle FEDORA-2011-16833
2012-04-02 00:00:00
nessus
nessus
Fedora 15 : moodle-1.9.15-1.fc15 (2011-16903)
2011-12-22 00:00:00
Fedora 16 : moodle-2.0.6-1.fc16 (2011-16833)
2011-12-22 00:00:00
CVSS2
6.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
AI Score
6.3
Confidence
Low
EPSS
0.003
Percentile
66.3%
Related for CVE-2011-4583