CVE-2011-4583 in Moodle

Riassunto

di MITRE

Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Prenotare: 29/11/2011
• Divulgazione: 20/07/2012
• Moderazione: accettato
• Voce: VDB-61346
• CPE: pronto
• CWE: CWE-264 (confermato)
• CVSS: 6.3 (VulDB)
• EPSS: 0.01272
• KEV: no
• Attività: molto basso
• Settore: Police, Education

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-4583
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-4583
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-4583/