Lucene search

RedhatCVE-2011-4281

HistoryJul 16, 2012 - 10:28 a.m.

CVE-2011-4281

2012-07-1610:28:36

CWE-352

redhat

web.nvd.nist.gov

cve-2011-4281

cross-site request forgery

csrf

moodle 2.0.x

authentication hijacking

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.002

Percentile

52.5%

JSON

Multiple cross-site request forgery (CSRF) vulnerabilities in Moodle 2.0.x before 2.0.2 allow remote attackers to hijack the authentication of arbitrary users for requests that mark the completion of (1) an activity or (2) a course.

Affected configurations

Nvd

Node

moodlemoodleMatch2.0.0

moodlemoodleMatch2.0.1

VendorProductVersionCPE
moodlemoodle2.0.0cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*
moodlemoodle2.0.1cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moodle	moodle	2.0.0	cpe:2.3:a:moodle:moodle:2.0.0:::::::*
moodle	moodle	2.0.1	cpe:2.3:a:moodle:moodle:2.0.1:::::::*

References

git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=9cedb80c5d6318aa17cd66912d37e6ef3dca9455

moodle.org/mod/forum/discuss.php?d=170006

openwall.com/lists/oss-security/2011/11/14/1

Social References

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

Low

EPSS

0.002

Percentile

52.5%

JSON

Related for CVE-2011-4281