Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4301
HistoryJul 11, 2012 - 12:00 a.m.

CVE-2011-4301

2012-07-1100:00:00
ubuntu.com
ubuntu.com
7

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

71.1%

The MoodleQuickForm class in the Forms Library in lib/formslib.php in
Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does
not recognize Forms API setConstant operations, which allows remote
attackers to submit unexpected form content by modifying the values of
constant fields.

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

0.003 Low

EPSS

Percentile

71.1%