CVE-2011-4303 in Moodle

Zusammenfassung

von MITRE

lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Reservieren: 04.11.2011
• Veröffentlichung: 11.07.2012
• Moderieren: akzeptiert
• Eintrag: VDB-61239
• CPE: bereit
• CWE: CWE-310 (bestätigt)
• CVSS: 4.3 (NVD)
• EPSS: 0.01248
• KEV: nein
• Aktivitäten: very low
• Sektor: Police, Education

Quellen

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-4303
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-4303
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-4303/