Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4590
HistoryJul 20, 2012 - 12:00 a.m.

CVE-2011-4590

2012-07-2000:00:00
ubuntu.com
ubuntu.com
6

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

EPSS

0.001

Percentile

42.9%

The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x
before 2.1.3 does not properly consider the maintenance-mode state and
account attributes during login attempts, which allows remote authenticated
users to bypass intended access restrictions by connecting to a webservice
server.

Bugs

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

EPSS

0.001

Percentile

42.9%