Lucene search

K
cvelistRedhatCVELIST:CVE-2012-3394
HistoryJul 23, 2012 - 9:00 p.m.

CVE-2012-3394

2012-07-2321:00:00
redhat
www.cve.org
3

AI Score

5.9

Confidence

Low

EPSS

0.005

Percentile

77.0%

auth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 redirects users from an https LDAP login URL to an http URL, which allows remote attackers to obtain sensitive information by sniffing the network.

AI Score

5.9

Confidence

Low

EPSS

0.005

Percentile

77.0%