Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-4285
HistoryJul 16, 2012 - 12:00 a.m.

CVE-2011-4285

2012-07-1600:00:00
ubuntu.com
ubuntu.com
11

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

0.003

Percentile

65.2%

The default configuration of Moodle 2.0.x before 2.0.2 has an incorrect
setting of the moodle/course:delete capability, which allows remote
authenticated users to delete arbitrary courses by leveraging the teacher
role.

Notes

Author Note
jdstrand moodle 2.0 only

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

0.003

Percentile

65.2%

Related for UB:CVE-2011-4285