Description

mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function, which allows remote attackers to bypass validation via a crafted certificate.

Remediation

References

CVE-2011-4302

Related Vulnerabilities

WordPress Plugin I Recommend This SQL Injection (3.7.2)

PHP Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2010-2531)

WordPress Plugin Custom Sidebars-Dynamic Widget Area Manager Cross-Site Scripting (2.1.0.1)

WordPress Plugin Chamber Dashboard Business Directory Cross-Site Scripting (3.2.8)

WordPress Plugin Image Optimizer by 10web-Image Optimizer and Compression Directory Traversal (1.0.25)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-20 CVE-2011-4302