CVE Vulnerabilities

CVE-2012-2358

Published: Jul 21, 2012 | Modified: Dec 01, 2020
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.5 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activitys read-only state and modify the database by leveraging the student role and editing database activity entries that already exist.

Affected Software

Name Vendor Start Version End Version
Moodle Moodle 2.0.2 2.0.2
Moodle Moodle 2.0.1 2.0.1
Moodle Moodle 2.0.4 2.0.4
Moodle Moodle 2.0.3 2.0.3
Moodle Moodle 2.0.6 2.0.6
Moodle Moodle 2.0.5 2.0.5
Moodle Moodle 2.0.8 2.0.8
Moodle Moodle 2.0.7 2.0.7
Moodle Moodle 2.0.0 2.0.0

References