Lucene search
Ubuntu.comUB:CVE-2011-4300HistoryJul 11, 2012 - 12:00 a.m.
CVE-2011-4300
2012-07-1100:00:00
ubuntu.com
ubuntu.com
7
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.003
Percentile
69.1%
The file_browser component in Moodle 2.0.x before 2.0.5 and 2.1.x before
2.1.2 does not properly restrict access to category and course data, which
allows remote attackers to obtain potentially sensitive information via a
request for a file.
Notes
| Author | Note |
|---|---|
| jdstrand | moodle 2.0 only |
Related
cve
cve
CVE-2011-4300
2012-07-11 10:26:10
osv
osv
Moodle does not properly restrict access to category and course data
2022-05-13 01:13:15
cvelist
cvelist
CVE-2011-4300
2012-07-11 10:00:00
nvd
nvd
CVE-2011-4300
2012-07-11 10:26:10
github
github
Moodle does not properly restrict access to category and course data
2022-05-13 01:13:15
prion
prion
Design/Logic Flaw
2012-07-11 10:26:00
nessus
nessus
Moodle 2.0.x < 2.0.5 / 2.1.x < 2.1.2 Multiple Vulnerabilities
2015-04-20 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
0.003
Percentile
69.1%
Related for UB:CVE-2011-4300