Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-4299
HistoryDec 16, 2009 - 12:00 a.m.

CVE-2009-4299

2009-12-1600:00:00
ubuntu.com
ubuntu.com
14

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

77.3%

mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before
1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which
allows attackers to read unauthorized Glossary entries via unknown vectors.

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

77.3%