CVE-2011-4592 in Moodle
Summary
The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron functionality.
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Reservation
11/29/2011
Disclosure
07/20/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61355 | Moodle Locking access control | 264 | Not defined | Official fix | CVE-2011-4592 |