Lucene search

K
nessusTenable9402.PRM
HistoryJul 21, 2016 - 12:00 a.m.

Moodle 1.9.x < 1.9.19 DoS

2016-07-2100:00:00
Tenable
www.tenable.com
12

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.005

Percentile

75.4%

The remote web server hosts Moodle, an open-source course management system. Versions of Moodle 1.9.x prior to 1.9.19 are exposed to a flaw that may allow a remote denial of service. The issue is triggered when searching database activities, which will cause an exhaustion of CPU resources. This will result in loss of availability for the program and the system. (CVE-2012-3398)

Binary data 9402.prm

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

EPSS

0.005

Percentile

75.4%