Lucene search

RedhatCVE-2011-4585

HistoryJul 20, 2012 - 10:40 a.m.

CVE-2011-4585

2012-07-2010:40:35

CWE-16

redhat

web.nvd.nist.gov

cve-2011-4585

moodle

security vulnerability

change-password

sniffing

network security

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.004

Percentile

72.2%

JSON

login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https for the change-password form even if the httpslogin option is enabled, which allows remote attackers to obtain credentials by sniffing the network.

Affected configurations

Nvd

Node

moodlemoodleMatch1.9.1

moodlemoodleMatch1.9.2

moodlemoodleMatch1.9.3

moodlemoodleMatch1.9.4

moodlemoodleMatch1.9.5

moodlemoodleMatch1.9.6

moodlemoodleMatch1.9.7

moodlemoodleMatch1.9.8

moodlemoodleMatch1.9.9

moodlemoodleMatch1.9.10

moodlemoodleMatch1.9.11

moodlemoodleMatch1.9.12

moodlemoodleMatch1.9.13

moodlemoodleMatch1.9.14

VendorProductVersionCPE
moodlemoodle1.9.1cpe:/a:moodle:moodle:1.9.1:::
moodlemoodle1.9.7cpe:/a:moodle:moodle:1.9.7:::
moodlemoodle1.9.6cpe:/a:moodle:moodle:1.9.6:::
moodlemoodle1.9.11cpe:/a:moodle:moodle:1.9.11:::
moodlemoodle1.9.10cpe:/a:moodle:moodle:1.9.10:::
moodlemoodle1.9.14cpe:/a:moodle:moodle:1.9.14:::
moodlemoodle1.9.2cpe:/a:moodle:moodle:1.9.2:::
moodlemoodle1.9.5cpe:/a:moodle:moodle:1.9.5:::
moodlemoodle1.9.9cpe:/a:moodle:moodle:1.9.9:::
moodlemoodle1.9.13cpe:/a:moodle:moodle:1.9.13:::

Vendor	Product	Version	CPE
moodle	moodle	1.9.1	cpe:/a:moodle:moodle:1.9.1:::
moodle	moodle	1.9.7	cpe:/a:moodle:moodle:1.9.7:::
moodle	moodle	1.9.6	cpe:/a:moodle:moodle:1.9.6:::
moodle	moodle	1.9.11	cpe:/a:moodle:moodle:1.9.11:::
moodle	moodle	1.9.10	cpe:/a:moodle:moodle:1.9.10:::
moodle	moodle	1.9.14	cpe:/a:moodle:moodle:1.9.14:::
moodle	moodle	1.9.2	cpe:/a:moodle:moodle:1.9.2:::
moodle	moodle	1.9.5	cpe:/a:moodle:moodle:1.9.5:::
moodle	moodle	1.9.9	cpe:/a:moodle:moodle:1.9.9:::
moodle	moodle	1.9.13	cpe:/a:moodle:moodle:1.9.13:::