Lucene search

K
freebsdFreeBSD2D299950-DDB0-11E5-8FA8-14DAE9D210B8
HistoryJan 18, 2016 - 12:00 a.m.

moodle -- multiple vulnerabilities

2016-01-1800:00:00
vuxml.freebsd.org
16

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

59.5%

Marina Glancy reports:

MSA-16-0001: Two enrolment-related web services don’t
check course visibility
MSA-16-0002: XSS Vulnerability in course management
search

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchmoodle28< 2.8.10UNKNOWN
FreeBSDanynoarchmoodle29< 2.9.4UNKNOWN
FreeBSDanynoarchmoodle30< 3.0.2UNKNOWN

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.002

Percentile

59.5%