Moodle Improper Input Validation Vulnerability - CVE-2011-4302 - Vulnerability Database

Moodle Improper Input Validation Vulnerability - CVE-2011-4302

Medium

Reference: CVE-2011-4302

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2011-4302

Title: Moodle Improper Input Validation Vulnerability

Overview:

mnet/xmlrpc/client.php in MNET in Moodle 1.9.x before 1.9.14 2.0.x before 2.0.5 and 2.1.x before 2.1.2 does not properly process the return value of the openssl_verify function which allows remote attackers to bypass validation via a crafted certificate.