Lucene search
HistoryJul 17, 2012 - 10:20 a.m.
CVE-2012-0799
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.003
Percentile
70.3%
Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page.
Affected configurations
Node
moodlemoodleMatch2.0.0
ORmoodlemoodleMatch2.0.1
ORmoodlemoodleMatch2.0.2
ORmoodlemoodleMatch2.0.3
ORmoodlemoodleMatch2.0.4
ORmoodlemoodleMatch2.0.5
ORmoodlemoodleMatch2.0.6
Node
moodlemoodleMatch2.1.0
ORmoodlemoodleMatch2.1.1
ORmoodlemoodleMatch2.1.2
ORmoodlemoodleMatch2.1.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| moodle | moodle | 2.0.0 | cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.1 | cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.2 | cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.3 | cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.4 | cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.5 | cpe:2.3:a:moodle:moodle:2.0.5:*:*:*:*:*:*:* |
| moodle | moodle | 2.0.6 | cpe:2.3:a:moodle:moodle:2.0.6:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.0 | cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.1 | cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:* |
| moodle | moodle | 2.1.2 | cpe:2.3:a:moodle:moodle:2.1.2:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2012-0799
2012-07-17 10:00:00
ubuntucve
ubuntucve
CVE-2012-0799
2012-07-17 00:00:00
veracode
veracode
Session Key Disclosure
2017-05-26 07:25:00
cve
cve
CVE-2012-0799
2012-07-17 10:20:53
prion
prion
Code injection
2012-07-17 10:20:00
fedora
fedora
[SECURITY] Fedora 15 Update: moodle-1.9.16-1.fc15
2012-02-02 17:21:30
[SECURITY] Fedora 16 Update: moodle-2.0.7-1.fc16
2012-02-02 17:27:16
openvas
openvas
Fedora Update for moodle FEDORA-2012-0939
2012-02-03 00:00:00
Fedora Update for moodle FEDORA-2012-0939
2012-02-03 00:00:00
Fedora Update for moodle FEDORA-2012-0913
2012-04-02 00:00:00
nessus
nessus
Fedora 16 : moodle-2.0.7-1.fc16 (2012-0913)
2012-02-03 00:00:00
Fedora 15 : moodle-1.9.16-1.fc15 (2012-0939)
2012-02-03 00:00:00
CVSS2
4.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:N/A:N
AI Score
6.5
Confidence
Low
EPSS
0.003
Percentile
70.3%
Related for NVD:CVE-2012-0799