Lucene search
HistoryJul 20, 2012 - 10:40 a.m.
CVE-2011-4588
cve-2011-4588
moodle
mnet
ip_in_range
xmlrpc
security vulnerability
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.2%
The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect data type, which allows remote attackers to bypass intended IP address restrictions via an XMLRPC request.
Related
prion
prion
Cross site request forgery (csrf)
2012-07-20 10:40:00
ubuntucve
ubuntucve
CVE-2011-4588
2012-07-20 00:00:00
fedora
fedora
[SECURITY] Fedora 16 Update: moodle-2.0.6-1.fc16
2011-12-21 17:11:48
[SECURITY] Fedora 15 Update: moodle-1.9.15-1.fc15
2011-12-21 17:10:35
osv
osv
moodle - several
2012-02-29 00:00:00
nessus
nessus
Debian DSA-2421-1 : moodle - several vulnerabilities
2012-03-01 00:00:00
Fedora 15 : moodle-1.9.15-1.fc15 (2011-16903)
2011-12-22 00:00:00
Fedora 16 : moodle-2.0.6-1.fc16 (2011-16833)
2011-12-22 00:00:00
securityvulns
securityvulns
[SECURITY] [DSA 2421-1] moodle security update
2012-03-19 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-2421-1)
2012-03-12 00:00:00
Debian Security Advisory DSA 2421-1 (moodle)
2012-03-12 00:00:00
Fedora Update for moodle FEDORA-2011-16903
2011-12-23 00:00:00
debian
debian
[SECURITY] [DSA 2421-1] moodle security update
2012-02-29 20:39:11
6.4 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.003 Low
EPSS
Percentile
68.2%
Related for CVE-2011-4588