Description

lib/moodlelib.php in Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle certain zero values in the password policy, which makes it easier for remote attackers to obtain access by leveraging the possible existence of user accounts that have unchangeable blank passwords.

Remediation

References

CVE-2011-4587

Related Vulnerabilities

WordPress Plugin Media.net Ads Manager Arbitrary File Upload (2.10.13)

Internet Information Services Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-1999-0349)

WordPress Plugin Ninja Popups Multiple Vulnerabilities (4.5.3)

LimeSurvey Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2019-16182)

Jetty Improper Resource Shutdown or Release Vulnerability (CVE-2022-2191)

Severity

Medium

Classification

CVE-2011-4587

Tags

Missing Update Known Vulnerabilities