CVE-2011-4587
First published: Fri Jul 20 2012(Updated: )
lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable blank passwords.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moodle Moodle | =2.0.2 | |
| Moodle Moodle | =1.9.4 | |
| Moodle Moodle | =1.9.1 | |
| Moodle Moodle | =1.9.6 | |
| Moodle Moodle | =1.9.9 | |
| Moodle Moodle | =2.0.1 | |
| Moodle Moodle | =1.9.11 | |
| Moodle Moodle | =2.1.2 | |
| Moodle Moodle | =2.0.4 | |
| Moodle Moodle | =1.9.2 | |
| Moodle Moodle | =1.9.12 | |
| Moodle Moodle | =1.9.10 | |
| Moodle Moodle | =2.0.3 | |
| Moodle Moodle | =2.1.1 | |
| Moodle Moodle | =1.9.3 | |
| Moodle Moodle | =2.0.5 | |
| Moodle Moodle | =1.9.13 | |
| Moodle Moodle | =1.9.5 | |
| Moodle Moodle | =1.9.14 | |
| Moodle Moodle | =1.9.8 | |
| Moodle Moodle | =1.9.7 | |
| Moodle Moodle | =2.0.0 | |
| Moodle Moodle | =2.1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- collector/nvd-historical
- collector/nvd-index
- agent/references
- agent/severity
- agent/author
- agent/weakness
- agent/type
- agent/event
- agent/softwarecombine
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/moodle
- canonical/moodle moodle
- version/moodle moodle/2.0.2
- version/moodle moodle/1.9.4
- version/moodle moodle/1.9.1
- version/moodle moodle/1.9.6
- version/moodle moodle/1.9.9
- version/moodle moodle/2.0.1
- version/moodle moodle/1.9.11
- version/moodle moodle/2.1.2
- version/moodle moodle/2.0.4
- version/moodle moodle/1.9.2
- version/moodle moodle/1.9.12
- version/moodle moodle/1.9.10
- version/moodle moodle/2.0.3
- version/moodle moodle/2.1.1
- version/moodle moodle/1.9.3
- version/moodle moodle/2.0.5
- version/moodle moodle/1.9.13
- version/moodle moodle/1.9.5
- version/moodle moodle/1.9.14
- version/moodle moodle/1.9.8
- version/moodle moodle/1.9.7
- version/moodle moodle/2.0.0
- version/moodle moodle/2.1.0