Lucene search

K
ubuntucveUbuntu.comUB:CVE-2014-3541
HistoryJul 29, 2014 - 12:00 a.m.

CVE-2014-3541

2014-07-2900:00:00
ubuntu.com
ubuntu.com
10

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.045

Percentile

92.5%

The Repositories component in Moodle through 2.3.11, 2.4.x before 2.4.11,
2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 allows
remote attackers to conduct PHP object injection attacks and execute
arbitrary code via serialized data associated with an add-on.

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.045

Percentile

92.5%