CVE-2012-0800

Опубликовано: 17 июл. 2012

Источник: nvd

CVSS2: 2.1

EPSS Низкий

Описание

The form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 makes it easier for physically proximate attackers to discover passwords by reading the contents of a non-password field, as demonstrated by accessing a create-groups page with Safari on an iPad device.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:*

EPSS

Процентиль: 22%

0.00068

Низкий

2.1 Low

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2012-0800

ubuntu

почти 13 лет назад

CVE-2012-0800

debian

почти 13 лет назад

The form-autocompletion functionality in Moodle 2.0.x before 2.0.7, 2. ...

GHSA-h58j-h7qq-f2c2

github

около 3 лет назад

EPSS

Процентиль: 22%

0.00068

Низкий

2.1 Low

CVSS2

Дефекты

CWE-200