Lucene search
RedhatCVE-2012-4407HistorySep 19, 2012 - 10:57 a.m.
CVE-2012-4407
2012-09-1910:57:07
CWE-200
redhat
web.nvd.nist.gov
21
moodle
cve-2012-4407
filelib.php
security vulnerability
sensitive information disclosure
nvd
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6
Confidence
Low
EPSS
0.003
Percentile
70.5%
lib/filelib.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 does not properly check the publication state of blog files, which allows remote attackers to obtain sensitive information by reading a blog entry that references a non-public file.
Affected configurations
Node
moodlemoodleMatch2.1.0
ORmoodlemoodleMatch2.1.1
ORmoodlemoodleMatch2.1.2
ORmoodlemoodleMatch2.1.3
ORmoodlemoodleMatch2.1.4
ORmoodlemoodleMatch2.1.5
ORmoodlemoodleMatch2.1.6
ORmoodlemoodleMatch2.1.7
Node
moodlemoodleMatch2.2.0
ORmoodlemoodleMatch2.2.1
ORmoodlemoodleMatch2.2.2
ORmoodlemoodleMatch2.2.3
ORmoodlemoodleMatch2.2.4
Node
moodlemoodleMatch2.3.0
ORmoodlemoodleMatch2.3.1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| moodle | moodle | 2.1.0 | cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.1 | cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.2 | cpe:2.3:a:moodle:moodle:2.1.2:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.3 | cpe:2.3:a:moodle:moodle:2.1.3:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.4 | cpe:2.3:a:moodle:moodle:2.1.4:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.5 | cpe:2.3:a:moodle:moodle:2.1.5:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.6 | cpe:2.3:a:moodle:moodle:2.1.6:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.7 | cpe:2.3:a:moodle:moodle:2.1.7:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.0 | cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.1 | cpe:2.3:a:moodle:moodle:2.2.1:*:*:*:*:*:*:* |
Related
ubuntucve
ubuntucve
CVE-2012-4407
2012-09-19 00:00:00
nvd
nvd
CVE-2012-4407
2012-09-19 10:57:07
veracode
veracode
Information Disclosure
2017-06-30 09:41:56
prion
prion
Design/Logic Flaw
2012-09-19 10:57:00
cvelist
cvelist
CVE-2012-4407
2012-09-19 10:00:00
nessus
nessus
Moodle 2.1.x < 2.1.8 Multiple Vulnerabilities
2016-07-21 00:00:00
Moodle 2.2.x < 2.2.5 Multiple Vulnerabilities
2016-07-21 00:00:00
Fedora 17 : moodle-2.2.5-1.fc17 (2012-14348)
2012-09-27 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: moodle-2.2.5-1.fc17
2012-09-27 04:28:10
openvas
openvas
Fedora Update for moodle FEDORA-2012-14348
2012-10-03 00:00:00
Fedora Update for moodle FEDORA-2012-14348
2012-10-03 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
AI Score
6
Confidence
Low
EPSS
0.003
Percentile
70.5%
Related for CVE-2012-4407