CVE Vulnerabilities

CVE-2012-0798

Published: Jul 17, 2012 | Modified: Apr 11, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.5 MEDIUM
AV:N/AC:L/Au:S/C:P/I:P/A:N
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows remote authenticated users to obtain the manager role by leveraging the teacher role.

Affected Software

Name Vendor Start Version End Version
Moodle Moodle 2.1.0 (including) 2.1.0 (including)
Moodle Moodle 2.1.1 (including) 2.1.1 (including)
Moodle Moodle 2.1.2 (including) 2.1.2 (including)
Moodle Moodle 2.1.3 (including) 2.1.3 (including)
Moodle Moodle 2.2.0 (including) 2.2.0 (including)
Moodle Ubuntu hardy *
Moodle Ubuntu lucid *
Moodle Ubuntu maverick *
Moodle Ubuntu natty *
Moodle Ubuntu oneiric *
Moodle Ubuntu precise *
Moodle Ubuntu upstream *

References