Lucene search

K
ubuntucveUbuntu.comUB:CVE-2009-4300
HistoryDec 16, 2009 - 12:00 a.m.

CVE-2009-4300

2009-12-1600:00:00
ubuntu.com
ubuntu.com
13

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

77.8%

Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and
1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even
when the cached hashes are not used by the plugin, which might make it
easier for attackers to obtain credentials via unspecified vectors.

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

77.8%

Related for UB:CVE-2009-4300