2014-03-24 15:20:39 2014-03-24 23:37:09

repository/alfresco/lib.php in Moodle through 2.3.11, 2.4.x before 2.4.9, 2.5.x before 2.5.5, and 2.6.x before 2.6.2 places a session key in a URL, which allows remote attackers to bypass intended Alfresco Repository file restrictions by impersonating a file's owner.

Vector

NETWORK

Complexity

MEDIUM

Authentication

NONE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

NONE
IBM Maximo for Nuclear Power 7.5.0.6 IBM Maximo for Oil and Gas 7.1 IBM Maximo for Oil and Gas 7.5.0.2 IBM Maximo for Oil and Gas 7.5.0.3 IBM Maximo for Government 7.5.0.0 IBM Maximo for Government 7.1 IBM Maximo Asset Management Essentials 7.5.0.6 IBM Maximo for Transportation 7.5.0.3 IBM Maximo for Transportation 7.5.0.4 IBM Maximo for Life Sciences 7.5.0.0 Moodle Moodle 2.3.10 (not an official CPE) IBM Maximo for Transportation 7.5.0.1 IBM Maximo for Life Sciences 7.5.0.2 Moodle Moodle 2.3.11 (not an official CPE) IBM Maximo for Transportation 7.5.0.2 IBM Maximo for Transportation 7.1 IBM Maximo for Transportation 7.5.0.0 Moodle Moodle 2.5.2 (not an official CPE) IBM Maximo for Utilities 7.5.0.6 Moodle Moodle 2.5.4 (not an official CPE) Moodle Moodle 2.5.3 (not an official CPE) IBM Maximo for Utilities 7.5.0.4 IBM Maximo for Utilities 7.5.0.3 IBM Maximo for Utilities 7.5.0.0 IBM Maximo for Utilities 7.5.0.2 IBM Maximo for Utilities 7.5.0.1 Moodle Moodle 2.6 (not an official CPE) IBM Maximo for Government 7.5.0.1 IBM Maximo for Government 7.5.0.2 Moodle Moodle 2.4.6 (not an official CPE) IBM Maximo for Government 7.5.0.3 Moodle Moodle 2.4.7 (not an official CPE) IBM Maximo for Government 7.5.0.4 IBM Maximo for Government 7.5.0.5 IBM Maximo for Government 7.5.0.6 IBM Maximo for Nuclear Power 7.1 IBM Maximo for Nuclear Power 7.5.0.0 IBM Maximo for Nuclear Power 7.5.0.3 IBM Maximo for Life Sciences 7.5.0.3 Moodle Moodle 2.4.8 (not an official CPE) IBM Maximo for Life Sciences 7.5.0.4 IBM Maximo for Life Sciences 7.5.0.5 IBM Maximo for Life Sciences 7.5.0.6 Moodle Moodle 2.3.9 (not an official CPE) IBM Maximo for Oil and Gas 7.5.0.5 IBM Maximo for Oil and Gas 7.5.0.4 IBM Maximo for Nuclear Power 7.5.0.4 IBM Maximo for Nuclear Power 7.5.0.5 IBM Maximo for Transportation 7.5.0.5 IBM Maximo for Transportation 7.5.0.6 IBM Maximo for Oil and Gas 7.5.0.1 IBM Maximo for Oil and Gas 7.5.0.0 IBM Maximo for Nuclear Power 7.5.0.2 IBM Maximo for Oil and Gas 7.5.0.6 IBM Maximo for Utilities 7.1 IBM Maximo for Nuclear Power 7.5.0.1 IBM Maximo for Life Sciences 7.5.0.1 IBM Maximo for Utilities 7.5.0.5 IBM Maximo Asset Management Essentials 7.5.0.5 IBM Maximo for Life Sciences 7.1 Moodle Moodle 2.6.1 (not an official CPE)