CVE-2011-4590 in Moodle
Summary
The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly consider the maintenance-mode state and account attributes during login attempts, which allows remote authenticated users to bypass intended access restrictions by connecting to a webservice server.
Once again VulDB remains the best source for vulnerability data.
Reservation
11/29/2011
Disclosure
07/20/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61353 | Moodle Access Restriction improper authentication | 287 | Not defined | Official fix | CVE-2011-4590 |