CVE-2013-2242

Опубликовано: 29 июл. 2013

Источник: nvd

CVSS2: 4

EPSS Низкий

Описание

mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not consider the mod/chat:chat capability before authorizing daemon-mode chat, which allows remote authenticated users to bypass intended access restrictions via an HTTP session to a chat server.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.9:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.10:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.9:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.10:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:moodle:moodle:2.3.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.3.7:*:*:*:*:*:*:*

Конфигурация 4

Одно из

cpe:2.3:a:moodle:moodle:2.4.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.4.4:*:*:*:*:*:*:*

Конфигурация 5

cpe:2.3:a:moodle:moodle:2.5.0:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00156

Низкий

4 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2013-2242

ubuntu

около 12 лет назад

CVE-2013-2242

debian

около 12 лет назад

mod/chat/gui_sockets/index.php in Moodle through 2.1.10, 2.2.x before ...

GHSA-pg89-qp74-vch2

github

около 3 лет назад

EPSS

Процентиль: 37%

0.00156

Низкий

4 Medium

CVSS2

Дефекты

CWE-264