NVD

Id
44991  
Name
CVE-2012-3394  
Description
auth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 redirects users from an https LDAP login URL to an http URL, which allows remote attackers to obtain sensitive information by sniffing the network.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2012-07-23  
Modified Date
2012-07-24  
Seq
2012-3394  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
225418 44991 CVE-2012-3394 http://git.moodle.org/gw?p=moodle.git;a=commit;h=9d8d2ee6192e8b7ebb6713bd6215e06f94e2a9f7  View
225419 44991 CVE-2012-3394 [oss-security] 20120717 Moodle security notifications public  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
27577 JVNDB-2012-003284 Moodle の auth/ldap/ntlmsso_attempt.php における重要な情報を取得される脆弱性 Moodle の auth/ldap/ntlmsso_attempt.php は、https LDAP ログイン URL から http URL へユーザをリダイレクトするため、重要な情報を取得される脆弱性が存在します。 CVE-2012-3394 56632 CVE-2012-3394 44991 5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-003284.html 2012-06-28 2012-07-25 View