CVE Vulnerabilities

CVE-2010-1616

Published: Apr 29, 2010 | Modified: Dec 01, 2020
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
LOW

Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring a course, which allows teachers to create new accounts even if they do not have the moodle/user:create capability.

Affected Software

Name Vendor Start Version End Version
Moodle Moodle 1.8.1 (including) 1.8.1 (including)
Moodle Moodle 1.8.2 (including) 1.8.2 (including)
Moodle Moodle 1.8.3 (including) 1.8.3 (including)
Moodle Moodle 1.8.4 (including) 1.8.4 (including)
Moodle Moodle 1.8.5 (including) 1.8.5 (including)
Moodle Moodle 1.8.6 (including) 1.8.6 (including)
Moodle Moodle 1.8.7 (including) 1.8.7 (including)
Moodle Moodle 1.8.8 (including) 1.8.8 (including)
Moodle Moodle 1.8.9 (including) 1.8.9 (including)
Moodle Moodle 1.8.10 (including) 1.8.10 (including)
Moodle Moodle 1.8.11 (including) 1.8.11 (including)
Moodle Moodle 1.9.1 (including) 1.9.1 (including)
Moodle Moodle 1.9.2 (including) 1.9.2 (including)
Moodle Moodle 1.9.3 (including) 1.9.3 (including)
Moodle Moodle 1.9.4 (including) 1.9.4 (including)
Moodle Moodle 1.9.5 (including) 1.9.5 (including)
Moodle Moodle 1.9.6 (including) 1.9.6 (including)
Moodle Moodle 1.9.7 (including) 1.9.7 (including)
Moodle Ubuntu dapper *
Moodle Ubuntu hardy *
Moodle Ubuntu jaunty *
Moodle Ubuntu karmic *
Moodle Ubuntu lucid *
Moodle Ubuntu maverick *
Moodle Ubuntu upstream *

References