Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4585
HistoryJul 20, 2012 - 12:00 a.m.

CVE-2011-4585

2012-07-2000:00:00
ubuntu.com
ubuntu.com
7

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.0%

login/change_password.php in Moodle 1.9.x before 1.9.15 does not use https
for the change-password form even if the httpslogin option is enabled,
which allows remote attackers to obtain credentials by sniffing the
network.

Bugs

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.004 Low

EPSS

Percentile

72.0%