Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4293
HistoryJul 16, 2012 - 12:00 a.m.

CVE-2011-4293

2012-07-1600:00:00
ubuntu.com
ubuntu.com
15

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

EPSS

0.006

Percentile

78.0%

The theme implementation in Moodle 2.0.x before 2.0.4 and 2.1.x before
2.1.1 triggers duplicate caching of Cascading Style Sheets (CSS) and
JavaScript content, which allows remote attackers to bypass intended access
restrictions and write to an operating-system temporary directory via
unspecified vectors.

Notes

Author Note
jdstrand moodle 2.0 only

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

EPSS

0.006

Percentile

78.0%

Related for UB:CVE-2011-4293