CVE-2012-3394

MEDIUM · CVSS 5 EPSS 2.10%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2012-07-23 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

CVE

CVE-2012-3394

Severity

MEDIUM

CVSS

EPSS

2.10%

Original Filing — NVD Description

auth/ldap/ntlmsso_attempt.php in Moodle 2.0.x before 2.0.10, 2.1.x before 2.1.7, 2.2.x before 2.2.4, and 2.3.x before 2.3.1 redirects users from an https LDAP login URL to an http URL, which allows remote attackers to obtain sensitive information by sniffing the network.