CVE-2011-4301
medium
CVSS v3
—
CVSS v2
5.0
VIR risk
5.0
Description
Moodle Allows Modification of Constants
Predictions
Exploit likelihood
20%
Patch ETA
—
Heuristic predictions, AS-IS, for prioritization only.
Mitigations
Vendor advisory: secalert@redhat.com — http://moodle.org/mod/forum/discuss.php?d=188313
Package impact
| Ecosystem | Package | Vulnerable | Fixed |
|---|---|---|---|
| Packagist | moodle/moodle | <1.9.14 | 1.9.14 |
| Packagist | moodle/moodle | >=2.0,<2.0.5 | 2.0.5 |
| Packagist | moodle/moodle | >=2.1,<2.1.2 | 2.1.2 |
Application impact
| Vendor | Product | Versions | Fixed |
|---|---|---|---|
| moodle | moodle | 1.9.2 | |
| moodle | moodle | 1.9.3 | |
| moodle | moodle | 1.9.4 | |
| moodle | moodle | 1.9.5 | |
| moodle | moodle | 1.9.6 | |
| moodle | moodle | 1.9.7 | |
| moodle | moodle | 1.9.8 | |
| moodle | moodle | 1.9.9 | |
| moodle | moodle | 1.9.10 | |
| moodle | moodle | 1.9.11 | |
| moodle | moodle | 1.9.12 | |
| moodle | moodle | 1.9.13 | |
| moodle | moodle | 2.0.0 | |
| moodle | moodle | 2.0.1 | |
| moodle | moodle | 2.0.2 | |
| moodle | moodle | 2.0.3 | |
| moodle | moodle | 2.0.4 | |
| moodle | moodle | 2.1.0 | |
| moodle | moodle | 2.1.1 | |
References
- http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=f1f70bd4dde6cd1ea4bdb8ab28fa3d36a53b89d8
- http://moodle.org/mod/forum/discuss.php?d=188313
- https://bugzilla.redhat.com/show_bug.cgi?id=747444
- https://nvd.nist.gov/vuln/detail/CVE-2011-4301
- https://github.com/moodle/moodle/commit/1f52e72526c305989eadc702b5299edb2a50ac3c
- https://github.com/moodle/moodle/commit/2a44c5192c875c4f4b4e813d7227b19d8fda86ba
- https://github.com/moodle/moodle/commit/a6f18c98f43b6fc6b8b7c4e96af41cb4a626e1b8
- https://github.com/moodle/moodle/commit/f1f70bd4dde6cd1ea4bdb8ab28fa3d36a53b89d8
- https://github.com/moodle/moodle
- http://git.moodle.org/gw?p=moodle.git;a=commit;h=f1f70bd4dde6cd1ea4bdb8ab28fa3d36a53b89d8
Verify integrity in audit chain (admin only). AS-IS.