Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-3179
HistoryJun 01, 2015 - 12:00 a.m.

CVE-2015-3179

2015-06-0100:00:00
ubuntu.com
ubuntu.com
9

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.002

Percentile

56.4%

login/confirm.php in Moodle through 2.5.9, 2.6.x before 2.6.11, 2.7.x
before 2.7.8, and 2.8.x before 2.8.6 allows remote authenticated users to
bypass intended login restrictions by leveraging access to an unconfirmed
suspended account.

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:N/I:P/A:N

EPSS

0.002

Percentile

56.4%