CVE-2011-4303 in Moodle

الملخص

بحسب MITRE

lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• حجز: 04/11/2011
• إفشاء: 11/07/2012
• الاعتدال: تمت الموافقة
• إدخال: VDB-61239
• CPE: جاهز
• CWE: CWE-310 (مؤكد)
• CVSS: 4.3 (NVD)
• EPSS: 0.01248
• KEV: لا
• النشاطات: منخفض جدًا
• القطاع: Police, Education

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-4303
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-4303
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-4303/