Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4584
HistoryJul 20, 2012 - 12:00 a.m.

CVE-2011-4584

2012-07-2000:00:00
ubuntu.com
ubuntu.com
7

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

EPSS

0.002

Percentile

52.1%

The MNET authentication functionality in Moodle 1.9.x before 1.9.15, 2.0.x
before 2.0.6, and 2.1.x before 2.1.3 allows remote authenticated users to
impersonate other user accounts by using the Login As feature in
conjunction with a remote MNET single sign-on capability, as demonstrated
by a Mahara site.

Bugs

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

EPSS

0.002

Percentile

52.1%