CVE-2009-0501

{"id": "CVE-2009-0501", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": true, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2009-02-10T02:30:00.547", "references": [{"url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html", "source": "cve@mitre.org"}, {"url": "http://moodle.org/security/", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/34418", "source": "cve@mitre.org"}, {"url": "http://www.openwall.com/lists/oss-security/2009/02/04/1", "source": "cve@mitre.org"}, {"url": "http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00004.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://moodle.org/security/", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://secunia.com/advisories/34418", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.openwall.com/lists/oss-security/2009/02/04/1", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Unspecified vulnerability in the Calendar export feature in Moodle 1.8 before 1.8.8 and 1.9 before 1.9.4 allows attackers to obtain sensitive information and conduct \"brute force attacks on user accounts\" via unknown vectors."}, {"lang": "es", "value": "Vulnerabilidad no especificada en la caracter\u00edstica de exportar el Calendario (Calendar) de Moodle v1.8 anterior a v1.8.8 y v1.9 anterior a v1.9.4; permite a atacantes obtener informaci\u00f3n sensible y provocar \"ataques por fuerza bruta en las cuentas de los usuarios\" a trav\u00e9s de vectores desconocidos."}], "lastModified": "2024-11-21T01:00:03.470", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:moodle:moodle:1.8.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "492A28FE-A2F8-4FF7-AC5B-0C3F5508506D"}, {"criteria": "cpe:2.3:a:moodle:moodle:1.8.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "28A897CA-3D8F-4575-BBD2-1C0C5A2ECC99"}, {"criteria": "cpe:2.3:a:moodle:moodle:1.8.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A4A3A5D9-D96E-46B3-AC22-25045564EB96"}, {"criteria": "cpe:2.3:a:moodle:moodle:1.8.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AF91F8EA-1737-4E11-9931-ACAFB4BC0018"}, {"criteria": "cpe:2.3:a:moodle:moodle:1.8.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1E81E148-5710-439C-8A1A-884D27640AAD"}, {"criteria": "cpe:2.3:a:moodle:moodle:1.8.6:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A3B70465-F734-4C65-9790-0D83D03B7A16"}, {"criteria": "cpe:2.3:a:moodle:moodle:1.8.7:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "DE2C0217-A25A-4D0A-8CC6-64DEBC9E198F"}, {"criteria": "cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24F2602B-8ED3-4026-A9A4-31BE8BDC7724"}, {"criteria": "cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7F24649-B67F-4809-9F54-7B623AEF5A4A"}, {"criteria": "cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}