Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4303
HistoryJul 11, 2012 - 12:00 a.m.

CVE-2011-4303

2012-07-1100:00:00
ubuntu.com
ubuntu.com
14

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

60.8%

lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does
not set the correct registration_hubs.secret value during installation,
which allows remote attackers to bypass intended access restrictions by
leveraging the hubs feature.

Notes

Author Note
jdstrand moodle 2.0 only

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

EPSS

0.002

Percentile

60.8%

Related for UB:CVE-2011-4303