Lucene search

K
cvelistRedhatCVELIST:CVE-2012-2357
HistoryJul 21, 2012 - 1:00 a.m.

CVE-2012-2357

2012-07-2101:00:00
redhat
www.cve.org
4

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

55.9%

The Multi-Authentication feature in the Central Authentication Service (CAS) functionality in auth/cas/cas_form.html in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not use HTTPS, which allows remote attackers to obtain credentials by sniffing the network.

AI Score

6.3

Confidence

Low

EPSS

0.002

Percentile

55.9%