CVE-2011-4592: Medium severity moodle vulnerability
The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron functionality.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-4592?
CVE-2011-4592 is considered a moderate severity vulnerability due to its potential to allow remote attackers to bypass IP address restrictions.
How do I fix CVE-2011-4592?
To fix CVE-2011-4592, you should upgrade Moodle to version 2.0.6 or higher for the 2.0.x branch or version 2.1.3 or higher for the 2.1.x branch.
Which versions of Moodle are affected by CVE-2011-4592?
CVE-2011-4592 affects Moodle versions 2.0.0 through 2.0.5 and versions 2.1.0 through 2.1.2.
What impact does CVE-2011-4592 have on Moodle's security?
The impact of CVE-2011-4592 allows remote attackers to execute cron jobs while bypassing IP blocking when misconfigured.
Is there a workaround for CVE-2011-4592 if I cannot upgrade?
There is no effective workaround for CVE-2011-4592, and users are strongly advised to upgrade to a patched version.