CVE-2011-4587: Medium severity moodle vulnerability
lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable blank passwords.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4587?
CVE-2011-4587 is classified as a medium severity vulnerability due to its potential to allow unauthorized access.
How do I fix CVE-2011-4587?
To fix CVE-2011-4587, update Moodle to a version that is not affected, specifically versions 1.9.15, 2.0.6, or 2.1.3 and later.
Which versions of Moodle are affected by CVE-2011-4587?
CVE-2011-4587 affects Moodle versions 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3.
Can CVE-2011-4587 be exploited remotely?
Yes, CVE-2011-4587 can be exploited remotely by attackers leveraging certain password policy configurations.
What problems does CVE-2011-4587 cause in Moodle?
CVE-2011-4587 allows remote attackers to potentially gain unauthorized access to user accounts due to improper handling of zero values in the password policy.