admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-05-29 01:31:20 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2009/CVE-2009-43xx/CVE-2009-4300.json
cad-safe-bot e6cbafdc40 Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00

250 lines
8.0 KiB
JSON
Raw Blame History

{
"id": "CVE-2009-4300",
"sourceIdentifier": "cve@mitre.org",
"published": "2009-12-16T01:30:00.407",
"lastModified": "2024-11-21T01:09:18.900",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Multiple unspecified authentication plugins in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 store the MD5 hashes for passwords in the user table, even when the cached hashes are not used by the plugin, which might make it easier for attackers to obtain credentials via unspecified vectors."
},
{
"lang": "es",
"value": "M\u00faltiples plugins de autenticaci\u00f3n sin especificar en Moodle v1.8 anteriores a v1.8.11 y v1.9 anteriores a v1.9.7 almacenan los hash MD5 para las contrase\u00f1as en la tabla de usuario, incluso cuando los hashes que se cachean no son utilizados por el plugin, lo que har\u00eda mas f\u00e1cil a atacantes obtener credenciales a trav\u00e9s de vectores sin especificar."
}
],
"metrics": {
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
"baseScore": 5.0,
"accessVector": "NETWORK",
"accessComplexity": "LOW",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "NONE",
"availabilityImpact": "NONE"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 10.0,
"impactScore": 2.9,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": false
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-200"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*",
"matchCriteriaId": "28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*",
"matchCriteriaId": "A4A3A5D9-D96E-46B3-AC22-25045564EB96"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*",
"matchCriteriaId": "AF91F8EA-1737-4E11-9931-ACAFB4BC0018"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*",
"matchCriteriaId": "1E81E148-5710-439C-8A1A-884D27640AAD"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*",
"matchCriteriaId": "DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.8.8:*:*:*:*:*:*:*",
"matchCriteriaId": "7949FC50-81B9-44AD-BB1B-91D025B34FF6"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.8.9:*:*:*:*:*:*:*",
"matchCriteriaId": "83AA5D08-CF62-45A8-A8FE-18F76BA8ECA5"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.8.10:*:*:*:*:*:*:*",
"matchCriteriaId": "2C61F076-71AC-4AEF-BECF-9EF0B05CEB77"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "24F2602B-8ED3-4026-A9A4-31BE8BDC7724"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*",
"matchCriteriaId": "D7F24649-B67F-4809-9F54-7B623AEF5A4A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*",
"matchCriteriaId": "6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*",
"matchCriteriaId": "ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*",
"matchCriteriaId": "DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*",
"matchCriteriaId": "291F73E9-1059-4E7F-860F-0DF2A35AA456"
}
]
}
]
}
],
"references": [
{
"url": "http://docs.moodle.org/en/Moodle_1.8.11_release_notes",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "http://docs.moodle.org/en/Moodle_1.9.7_release_notes",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "http://moodle.org/mod/forum/discuss.php?d=139105",
"source": "cve@mitre.org"
},
{
"url": "http://secunia.com/advisories/37614",
"source": "cve@mitre.org",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.securityfocus.com/bid/37244",
"source": "cve@mitre.org",
"tags": [
"Patch"
]
},
{
"url": "http://www.vupen.com/english/advisories/2009/3455",
"source": "cve@mitre.org",
"tags": [
"Patch",
"Vendor Advisory"
]
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html",
"source": "cve@mitre.org"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html",
"source": "cve@mitre.org"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html",
"source": "cve@mitre.org"
},
{
"url": "http://docs.moodle.org/en/Moodle_1.8.11_release_notes",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "http://docs.moodle.org/en/Moodle_1.9.7_release_notes",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "http://moodle.org/mod/forum/discuss.php?d=139105",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://secunia.com/advisories/37614",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Vendor Advisory"
]
},
{
"url": "http://www.securityfocus.com/bid/37244",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "http://www.vupen.com/english/advisories/2009/3455",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch",
"Vendor Advisory"
]
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
]
}
Reference in New Issue View Git Blame Copy Permalink