NVD

Id
10772  
Name
CVE-2011-4303  
Description
lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2012-07-11  
Modified Date
2012-07-16  
Seq
2011-4303  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
60522 10772 CVE-2011-4303 http://git.moodle.org/gw?p=moodle.git;a=commit;h=ca896fdfcfcc87846fa91a297d0aa6999a68c48a  View
60523 10772 CVE-2011-4303 http://moodle.org/mod/forum/discuss.php?d=188315  View
60524 10772 CVE-2011-4303 https://bugzilla.redhat.com/show_bug.cgi?id=747444  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34819 JVNDB-2011-005061 Moodle の lib/db/upgrade.php におけるアクセス制限を回避される脆弱性 Moodle の lib/db/upgrade.php は、インストール時に、正しい registration_hubs.secret 値を設定しないため、アクセス制限を回避される脆弱性が存在します。 CVE-2011-4303 52210 CVE-2011-4303 10772 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005061.html 2011-10-18 2012-07-12 View