Home > Vulnerability Database > CVE-2012-3394

WhiteSource Vulnerability Database

CVE-2012-3394

Good to know:

Date: July 23, 2012

auth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 redirects users from an https LDAP login URL to an http URL, which allows remote attackers to obtain sensitive information by sniffing the network.

Language: PHP

Severity Score

5.0

Related Resources (5)

Url: https://exchange.xforce.ibmcloud.com/vulnerabilities/76960

Url: https://nvd.nist.gov/vuln/detail/CVE-2012-3394

Url: http://openwall.com/lists/oss-security/2012/07/17/1

Url: http://secunia.com/advisories/49890

Url: https://www.whitesourcesoftware.com/vulnerability-database/CVE-2012-3394

Severity Score

5.0

Weakness Type (CWE)

Information Leak / Disclosure

CWE-200

Top Fix

Upgrade Version

Upgrade to version v2.0.10,v2.1.7,v2.2.4,v2.3.1

Learn More

CVSS v2

Base Score:	5.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	NONE
Confidentiality (C):	PARTIAL
Integrity (I):	NONE
Availability (A):	NONE
Additional information:

WhiteSource Vulnerability Database

We found results for “”

CVE-2012-3394

Good to know:

Date: July 23, 2012

Language: PHP

Severity Score

Related Resources (5)

Severity Score

Weakness Type (CWE)

Top Fix

Upgrade Version

CVSS v2

Do you need more information?