CVE-2011-4287

admin/uploaduserform.php in Moodle 2.0.x before 2.0.3 does not force password changes for autosubscribed users, which makes it easier for remote attackers to obtain access by leveraging knowledge of the initial password of a new user...

CVE-2011-4287

CVE-2011-4287 affects Moodle 2.0.x before 2.0.3 where admin/uploaduser_form.php does not force password changes for autosubscribed users. This allows remote attackers to gain access by using the initial password of a newly created autosubscribed account. The issue is documented across multiple so...