CVE-2011-4309: Medium severity moodle vulnerability
Published Jul 11, 2012
·Updated
Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote attackers to bypass intended access restrictions and perform global searches by leveraging the guest role and making a direct request to a URL.
Affected Software
7 affected components
Moodle moodle=2.0.0
Moodle moodle=2.0.1
Moodle moodle=2.0.2
Moodle moodle=2.0.3
Moodle moodle=2.0.4
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Event History
Jul 11, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4309?
CVE-2011-4309 is considered a medium severity vulnerability due to its ability to bypass access restrictions.
2
How do I fix CVE-2011-4309?
To fix CVE-2011-4309, upgrade Moodle to version 2.0.5 or 2.1.2 or later.
3
Which versions of Moodle are affected by CVE-2011-4309?
CVE-2011-4309 affects Moodle versions 2.0.0 to 2.0.4 and 2.1.0 to 2.1.1.
4
What is the impact of CVE-2011-4309?
The impact of CVE-2011-4309 allows remote attackers to perform unauthorized global searches.
5
Who can exploit CVE-2011-4309?
CVE-2011-4309 can be exploited by remote attackers using the guest role to access restricted information.