CVE-2011-4588: Medium severity moodle vulnerability
Published Jul 20, 2012
·Updated
The ipinrange function in mnet/lib.php in MNET in Moodle 1.9.x before 1.9.15 uses an incorrect data type, which allows remote attackers to bypass intended IP address restrictions via an XMLRPC request.
Affected Software
14 affected components
Moodle moodle=1.9.1
Moodle moodle=1.9.2
Moodle moodle=1.9.3
Moodle moodle=1.9.4
Moodle moodle=1.9.5
Moodle moodle=1.9.6
Moodle moodle=1.9.7
Moodle moodle=1.9.8
Moodle moodle=1.9.9
Moodle moodle=1.9.10
Moodle moodle=1.9.11
Moodle moodle=1.9.12
Moodle moodle=1.9.13
Moodle moodle=1.9.14
Event History
Jul 20, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4588?
CVE-2011-4588 has a medium severity rating due to its ability to allow unauthorized access through IP address restrictions.
2
How do I fix CVE-2011-4588?
To fix CVE-2011-4588, you should upgrade your Moodle installation to version 1.9.15 or later.
3
What software is affected by CVE-2011-4588?
CVE-2011-4588 affects Moodle versions 1.9.1 through 1.9.14.
4
What type of vulnerability is CVE-2011-4588?
CVE-2011-4588 is a security bypass vulnerability that allows unauthorized XMLRPC requests.
5
Who is at risk with CVE-2011-4588?
Organizations using vulnerable versions of Moodle are at risk of unauthorized access to their systems.