CVEvulnerability
CVE-2011-4592
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-07-20
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-264
Description
The command-line cron implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly interact with IP blocking, which might allow remote attackers to bypass intended IP address restrictions by leveraging a configuration in which IP blocking was disabled to restore cron functionality.
Affected configurations
• moodle moodle 2.0.0
• moodle moodle 2.0.1
• moodle moodle 2.0.2
• moodle moodle 2.0.3
• moodle moodle 2.0.4
• moodle moodle 2.0.5
• moodle moodle 2.1.0
• moodle moodle 2.1.1
• moodle moodle 2.1.2
Related
Weakness · not in database (1)
References
- http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=ade30ad3c420ce035a3d68287db701b70e806b3f git.moodle.org
- http://moodle.org/mod/forum/discuss.php?d=191761 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=761248 bugzilla.redhat.com
- http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=ade30ad3c420ce035a3d68287db701b70e806b3f git.moodle.org
- http://moodle.org/mod/forum/discuss.php?d=191761 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=761248 bugzilla.redhat.com