CVE-2011-4587 in moodle
Summary
lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable blank passwords.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
11/29/2011
Disclosure
07/20/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61350 | moodle Password Policy moodlelib.php credentials management | 255 | Not defined | Official fix | CVE-2011-4587 |