Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-3394
HistoryJul 23, 2012 - 12:00 a.m.

CVE-2012-3394

2012-07-2300:00:00
ubuntu.com
ubuntu.com
11

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

77.0%

auth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before
2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 redirects users from an
https LDAP login URL to an http URL, which allows remote attackers to
obtain sensitive information by sniffing the network.

Bugs

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

0.005

Percentile

77.0%