Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4302
HistoryJul 11, 2012 - 12:00 a.m.

CVE-2011-4302

2012-07-1100:00:00
ubuntu.com
ubuntu.com
8

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.005

Percentile

77.2%

mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before
2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of
the openssl_verify function, which allows remote attackers to bypass
validation via a crafted certificate.

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

EPSS

0.005

Percentile

77.2%

Related for UB:CVE-2011-4302