Vulnerability in Moodle

CVE-2011-4303

lib/db/upgrade.php in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not set the correct registration_hubs.secret value during installation, which allows remote attackers to bypass intended access restrictions by leveraging the hubs feature.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.012 (66.3th percentile) — read the EPSS interpretation.

Affected products

  • Moodle — versions 2.0.0, 2.0.1, 2.0.2
  • N/a — versions n/a

Weakness classification (CWE)

References