Lucene search

K
cveRedhatCVE-2012-6104
HistoryJan 27, 2013 - 10:55 p.m.

CVE-2012-6104

2013-01-2722:55:04
CWE-200
redhat
web.nvd.nist.gov
24
moodle
rss
cve-2012-6104
information security
vulnerability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.003

Percentile

70.5%

blog/rsslib.php in Moodle 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 allows remote attackers to obtain sensitive information from site-level blogs by leveraging the guest role and reading an RSS feed.

Affected configurations

Nvd
Node
moodlemoodleMatch2.2.0
OR
moodlemoodleMatch2.2.1
OR
moodlemoodleMatch2.2.2
OR
moodlemoodleMatch2.2.3
OR
moodlemoodleMatch2.2.4
OR
moodlemoodleMatch2.2.5
OR
moodlemoodleMatch2.2.6
Node
moodlemoodleMatch2.3.0
OR
moodlemoodleMatch2.3.1
OR
moodlemoodleMatch2.3.2
OR
moodlemoodleMatch2.3.3
Node
moodlemoodleMatch2.4.0
VendorProductVersionCPE
moodlemoodle2.2.0cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:*
moodlemoodle2.2.1cpe:2.3:a:moodle:moodle:2.2.1:*:*:*:*:*:*:*
moodlemoodle2.2.2cpe:2.3:a:moodle:moodle:2.2.2:*:*:*:*:*:*:*
moodlemoodle2.2.3cpe:2.3:a:moodle:moodle:2.2.3:*:*:*:*:*:*:*
moodlemoodle2.2.4cpe:2.3:a:moodle:moodle:2.2.4:*:*:*:*:*:*:*
moodlemoodle2.2.5cpe:2.3:a:moodle:moodle:2.2.5:*:*:*:*:*:*:*
moodlemoodle2.2.6cpe:2.3:a:moodle:moodle:2.2.6:*:*:*:*:*:*:*
moodlemoodle2.3.0cpe:2.3:a:moodle:moodle:2.3.0:*:*:*:*:*:*:*
moodlemoodle2.3.1cpe:2.3:a:moodle:moodle:2.3.1:*:*:*:*:*:*:*
moodlemoodle2.3.2cpe:2.3:a:moodle:moodle:2.3.2:*:*:*:*:*:*:*
Rows per page:
1-10 of 121

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.2

Confidence

Low

EPSS

0.003

Percentile

70.5%