PT-2012-1848 · Moodle · Moodle

CVE-2011-4300 · Publicado 2012-07-11 · Atualizado 2023-02-13

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions 2.0.0 through 2.0.4 Moodle versions 2.1.0 through 2.1.1

Description The file browser component does not properly restrict access to category and course data, allowing remote attackers to obtain potentially sensitive information via a request for a file.

Recommendations For Moodle versions 2.0.0 through 2.0.4, update to version 2.0.5 or later. For Moodle versions 2.1.0 through 2.1.1, update to version 2.1.2 or later.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

CWE-264

Identificadores relacionados

CVE-2011-4300

GHSA-9P54-PC88-36C4

Produtos afetados

Moodle

Referências · 10

• https://github.com/moodle/moodle · Nota
• https://github.com/moodle/moodle/commit/6f7c43c7de8f62cd53a7f3b54ad5325cd109c1be · Nota
• https://github.com/moodle/moodle/commit/f6b07c4da54a9db24723beb147e8a19a3d487e00 · Nota
• https://github.com/moodle/moodle/commit/81c77993e3808bba68fe24d6bfbac19a41679a6f · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-4300 · Nota de Segurança
• http://git.moodle.org/gw?p=moodle.git;a=commit;h=f6b07c4da54a9db24723beb147e8a19a3d487e00 · Nota
• http://moodle.org/mod/forum/discuss.php?d=188311 · Aviso do Fabricante
• http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=f6b07c4da54a9db24723beb147e8a19a3d487e00 · Nota
• https://osv.dev/vulnerability/GHSA-9p54-pc88-36c4 · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=747444 · Correção