CVE-2012-0799

Published Jul 17, 2012 CVSS 2.0 · 4.3 Medium EPSS 1.2% KEV · Not listed
Description
Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2012-0828 Moodle 2.0.x before 2.0.7 and 2.1.x before 2.1.4, when an anonymous front-page forum is enabled, allows remote attackers to obtain session keys for their sessions by visiting the front page.
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Aug 6, 2024, 6:38 PM
Reserved
Jan 19, 2012, 12:00 AM
Status
Modified
Published
Jul 17, 2012, 10:20 AM
Modified
Jun 16, 2026, 11:38 PM