Lucene search

RedhatCVE-2011-4584

HistoryJul 20, 2012 - 10:40 a.m.

CVE-2011-4584

2012-07-2010:40:35

CWE-264

redhat

web.nvd.nist.gov

moodle

cve-2011-4584

mnet

authentication

impersonation

remote

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

52.1%

JSON

The MNET authentication functionality in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 allows remote authenticated users to impersonate other user accounts by using the Login As feature in conjunction with a remote MNET single sign-on capability, as demonstrated by a Mahara site.

Affected configurations

Nvd

Node

moodlemoodleMatch1.9.1

moodlemoodleMatch1.9.2

moodlemoodleMatch1.9.3

moodlemoodleMatch1.9.4

moodlemoodleMatch1.9.5

moodlemoodleMatch1.9.6

moodlemoodleMatch1.9.7

moodlemoodleMatch1.9.8

moodlemoodleMatch1.9.9

moodlemoodleMatch1.9.10

moodlemoodleMatch1.9.11

moodlemoodleMatch1.9.12

moodlemoodleMatch1.9.13

moodlemoodleMatch1.9.14

moodlemoodleMatch2.0.0

moodlemoodleMatch2.0.1

moodlemoodleMatch2.0.2

moodlemoodleMatch2.0.3

moodlemoodleMatch2.0.4

moodlemoodleMatch2.0.5

moodlemoodleMatch2.1.0

moodlemoodleMatch2.1.1

moodlemoodleMatch2.1.2

VendorProductVersionCPE
moodlemoodle1.9.1cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*
moodlemoodle1.9.2cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*
moodlemoodle1.9.3cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*
moodlemoodle1.9.4cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*
moodlemoodle1.9.5cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*
moodlemoodle1.9.6cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*
moodlemoodle1.9.7cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:*
moodlemoodle1.9.8cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:*
moodlemoodle1.9.9cpe:2.3:a:moodle:moodle:1.9.9:*:*:*:*:*:*:*
moodlemoodle1.9.10cpe:2.3:a:moodle:moodle:1.9.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moodle	moodle	1.9.1	cpe:2.3:a:moodle:moodle:1.9.1:::::::*
moodle	moodle	1.9.2	cpe:2.3:a:moodle:moodle:1.9.2:::::::*
moodle	moodle	1.9.3	cpe:2.3:a:moodle:moodle:1.9.3:::::::*
moodle	moodle	1.9.4	cpe:2.3:a:moodle:moodle:1.9.4:::::::*
moodle	moodle	1.9.5	cpe:2.3:a:moodle:moodle:1.9.5:::::::*
moodle	moodle	1.9.6	cpe:2.3:a:moodle:moodle:1.9.6:::::::*
moodle	moodle	1.9.7	cpe:2.3:a:moodle:moodle:1.9.7:::::::*
moodle	moodle	1.9.8	cpe:2.3:a:moodle:moodle:1.9.8:::::::*
moodle	moodle	1.9.9	cpe:2.3:a:moodle:moodle:1.9.9:::::::*
moodle	moodle	1.9.10	cpe:2.3:a:moodle:moodle:1.9.10:::::::*