admin/nvd-json-data-feeds
1
0
Fork 0
mirror of https://github.com/fkie-cad/nvd-json-data-feeds.git synced 2025-09-17 18:45:49 +00:00
Code Issues Packages Projects Releases Wiki Activity
nvd-json-data-feeds/CVE-2016/CVE-2016-37xx/CVE-2016-3734.json
cad-safe-bot e6cbafdc40 Auto-Update: 2024-12-08T03:00:18.988682+00:00
2024-12-08 03:06:42 +00:00

391 lines
14 KiB
JSON
Raw Blame History

{
"id": "CVE-2016-3734",
"sourceIdentifier": "secalert@redhat.com",
"published": "2017-04-20T21:59:00.873",
"lastModified": "2024-11-21T02:50:36.093",
"vulnStatus": "Modified",
"cveTags": [],
"descriptions": [
{
"lang": "en",
"value": "Cross-site request forgery (CSRF) vulnerability in markposts.php in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13 and earlier allows remote attackers to hijack the authentication of users for requests that marks forum posts as read."
},
{
"lang": "es",
"value": "Vulnerabilidad CSRF en markposts.php en Moodle 3.0 en versiones hasta 3.0.3, 2.9 en versiones hasta 2.9.5, 2.8 en versiones hasta 2.8.11, 2.7 en versiones hasta 2.7.13 y en versiones anteriores, permite a atacantes remotos secuestrar la la autenticaci\u00f3n de los usuarios para las solicitudes que marca los posts del foro como le\u00eddos."
}
],
"metrics": {
"cvssMetricV30": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "3.0",
"vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"attackVector": "NETWORK",
"attackComplexity": "LOW",
"privilegesRequired": "NONE",
"userInteraction": "REQUIRED",
"scope": "UNCHANGED",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"availabilityImpact": "HIGH"
},
"exploitabilityScore": 2.8,
"impactScore": 5.9
}
],
"cvssMetricV2": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"cvssData": {
"version": "2.0",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"baseScore": 6.8,
"accessVector": "NETWORK",
"accessComplexity": "MEDIUM",
"authentication": "NONE",
"confidentialityImpact": "PARTIAL",
"integrityImpact": "PARTIAL",
"availabilityImpact": "PARTIAL"
},
"baseSeverity": "MEDIUM",
"exploitabilityScore": 8.6,
"impactScore": 6.4,
"acInsufInfo": false,
"obtainAllPrivilege": false,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"weaknesses": [
{
"source": "nvd@nist.gov",
"type": "Primary",
"description": [
{
"lang": "en",
"value": "CWE-352"
}
]
}
],
"configurations": [
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.0:*:*:*:*:*:*:*",
"matchCriteriaId": "4E051AAC-EB40-491F-AF0E-EE8143C12567"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.0:beta:*:*:*:*:*:*",
"matchCriteriaId": "B336EDB1-B691-4341-ABF1-B155B9181603"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "91A69F58-0774-4730-A23A-C88452E92F54"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "1C7E26A6-C043-4AFF-AA57-AC89C89F6FA7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.1:*:*:*:*:*:*:*",
"matchCriteriaId": "FADBE87F-1855-453B-B958-0CB8A7908A06"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.2:*:*:*:*:*:*:*",
"matchCriteriaId": "1B53A7D2-BDA2-4185-97C3-977A04876A37"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.3:*:*:*:*:*:*:*",
"matchCriteriaId": "A51DFFA8-DFF0-429C-B697-F82F41621FEE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.4:*:*:*:*:*:*:*",
"matchCriteriaId": "19FD1565-0DA1-4BA8-A501-86F13D3D29ED"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.5:*:*:*:*:*:*:*",
"matchCriteriaId": "6D82CFE8-C38D-4FF3-BC4F-6C27AD64D9A3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.6:*:*:*:*:*:*:*",
"matchCriteriaId": "FEB754AF-3DA4-4459-A53B-3BC7B78CE313"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.7:*:*:*:*:*:*:*",
"matchCriteriaId": "F57E8383-C3F3-480C-B9A9-49633DAAEC18"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.8:*:*:*:*:*:*:*",
"matchCriteriaId": "645E8B7B-1AE6-4F46-AFA9-7506685CD571"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.9:*:*:*:*:*:*:*",
"matchCriteriaId": "0316A26A-8B51-4226-8D56-4A798A2D798D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.10:*:*:*:*:*:*:*",
"matchCriteriaId": "DF5A44BF-A70E-4AEF-9A3C-E03809744AB3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.11:*:*:*:*:*:*:*",
"matchCriteriaId": "5E3F7DEF-1A66-43CB-BE45-EC609D60D76E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.12:*:*:*:*:*:*:*",
"matchCriteriaId": "DD39692F-BC98-4AE3-B31A-4592D3212F4E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.7.13:*:*:*:*:*:*:*",
"matchCriteriaId": "DFF44C96-301D-4708-99A0-B0751A6980F1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*",
"matchCriteriaId": "12737AF4-B2D5-4661-B06A-6A06FE95EC2D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*",
"matchCriteriaId": "88C59A94-D225-478A-B23E-41C4324BC643"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*",
"matchCriteriaId": "192EA69B-A1E1-4E0D-8E73-76EB74CCDE49"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*",
"matchCriteriaId": "D88385B1-EEFB-4825-BD8F-215C39FD86DA"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*",
"matchCriteriaId": "A3BE2782-D167-4237-B57D-2E4C04571524"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*",
"matchCriteriaId": "F277F979-12FA-47A5-B0A5-D174C2127A7D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*",
"matchCriteriaId": "38498617-8E45-4E73-AE9F-C7A0D18FDE47"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*",
"matchCriteriaId": "C9047769-BFF4-42DB-8B19-F6D16FA910A1"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*",
"matchCriteriaId": "73A75ACE-FED2-4830-B259-744ABF25463E"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*",
"matchCriteriaId": "F04EBA18-DFFF-4529-B647-98191325663B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*",
"matchCriteriaId": "A3A746AB-5D58-4196-962A-D22454C3550B"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.8.11:*:*:*:*:*:*:*",
"matchCriteriaId": "B549AD98-4DC5-4BE8-B3E0-3EEF1833E6D7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*",
"matchCriteriaId": "C9224D94-1C48-468C-A39B-B2694ED178F4"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*",
"matchCriteriaId": "1C7EE9AD-E122-4288-9416-6D8F8790D75D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*",
"matchCriteriaId": "C4FC2CC1-787B-480F-BC41-538CE2507CB7"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*",
"matchCriteriaId": "098BADF2-C1D3-406E-9E79-E25483178C99"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*",
"matchCriteriaId": "611B027A-38D6-445E-BFA9-FA68524147DB"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:2.9.5:*:*:*:*:*:*:*",
"matchCriteriaId": "5654B446-F7A5-49D4-90D9-478C18220A32"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*",
"matchCriteriaId": "8C22EB95-6D8F-45F8-A000-795E259CF06D"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:3.0.0:beta:*:*:*:*:*:*",
"matchCriteriaId": "3989501E-B42A-4CCB-859C-862BE31B80B3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:3.0.0:rc1:*:*:*:*:*:*",
"matchCriteriaId": "3DE9F9A6-9C3A-4827-8CFB-EA1BC46881AC"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:3.0.0:rc2:*:*:*:*:*:*",
"matchCriteriaId": "4FF2D22F-577F-4F06-80E0-B107F474CD08"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:3.0.0:rc3:*:*:*:*:*:*",
"matchCriteriaId": "F01D7EF6-20AF-4B7B-9305-FDE84332CA2C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:3.0.0:rc4:*:*:*:*:*:*",
"matchCriteriaId": "FBBE87CB-0720-41F8-9B14-9FE670742A65"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*",
"matchCriteriaId": "65FE0DC7-131E-4ED1-9CFF-70C79995A0B9"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*",
"matchCriteriaId": "80B3EEF9-F300-461F-9407-0FFB3E3CD421"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*",
"matchCriteriaId": "0C702CFE-417E-45E2-94DD-07A9DADDA89E"
}
]
}
]
}
],
"references": [
{
"url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-53755",
"source": "secalert@redhat.com",
"tags": [
"Patch"
]
},
{
"url": "http://www.openwall.com/lists/oss-security/2016/05/17/4",
"source": "secalert@redhat.com",
"tags": [
"Mailing List",
"Third Party Advisory"
]
},
{
"url": "http://www.securityfocus.com/bid/91281",
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://www.securitytracker.com/id/1035902",
"source": "secalert@redhat.com",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335933",
"source": "secalert@redhat.com",
"tags": [
"Issue Tracking",
"Third Party Advisory"
]
},
{
"url": "http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-53755",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Patch"
]
},
{
"url": "http://www.openwall.com/lists/oss-security/2016/05/17/4",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Mailing List",
"Third Party Advisory"
]
},
{
"url": "http://www.securityfocus.com/bid/91281",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "http://www.securitytracker.com/id/1035902",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Third Party Advisory",
"VDB Entry"
]
},
{
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=1335933",
"source": "af854a3a-2127-422b-91ae-364da2661108",
"tags": [
"Issue Tracking",
"Third Party Advisory"
]
}
]
}
Reference in New Issue View Git Blame Copy Permalink