CVE-2012-2357

CVE-2012-2357 describes a vulnerability in the Multi-Authentication feature of the Central Authentication Service (CAS) functionality within Moodle versions 2.1.x before 2.1.6 and 2.2.x before 2.2.3. This flaw stems from the feature's failure to utilize HTTPS, allowing remote attackers to intercept user credentials via network sniffing. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and low attack complexity, but potentially leading to information disclosure. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.