CVE-2011-4588 in Moodle

Riassunto

di MITRE

The ip_in_range function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect data type, which allows remote attackers to bypass intended IP address restrictions via an XMLRPC request.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Prenotare: 29/11/2011
• Divulgazione: 20/07/2012
• Moderazione: accettato
• Voce: VDB-61351
• CPE: pronto
• CWE: CWE-264 (confermato)
• CVSS: 5.0 (NVD)
• EPSS: 0.02149
• KEV: no
• Attività: molto basso
• Settore: Police, Education

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2011-4588
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2011-4588
• CVE Details: https://www.cvedetails.com/cve/CVE-2011-4588/