Description

mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate.

Remediation

References

CVE-2011-4302

Related Vulnerabilities

Jboss EAP Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4572)

Roundcube Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2009-4076)

WordPress Plugin Convert Docx2post Arbitrary File Upload (1.4)

WebLogic Improper Certificate Validation Vulnerability (CVE-2021-3450)

WordPress Plugin Count per Day 'userperspan.php' Multiple Cross-Site Scripting Vulnerabilities (3.1.1)

Severity

Medium

Classification

CVE-2011-4302 CWE-20

Tags

Missing Update Known Vulnerabilities