CVE Vulnerabilities

CVE-2012-2358

Published: Jul 21, 2012 | Modified: Dec 01, 2020
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5.5 MEDIUM
AV:N/AC:L/Au:S/C:N/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity’s read-only state and modify the database by leveraging the student role and editing database activity entries that already exist.

Affected Software

Name Vendor Start Version End Version
Moodle Moodle 2.0.0 2.0.0
Moodle Moodle 2.0.1 2.0.1
Moodle Moodle 2.0.2 2.0.2
Moodle Moodle 2.0.3 2.0.3
Moodle Moodle 2.0.4 2.0.4
Moodle Moodle 2.0.5 2.0.5
Moodle Moodle 2.0.6 2.0.6
Moodle Moodle 2.0.7 2.0.7
Moodle Moodle 2.0.8 2.0.8
Moodle Ubuntu artful *
Moodle Ubuntu hardy *
Moodle Ubuntu quantal *
Moodle Ubuntu raring *
Moodle Ubuntu saucy *
Moodle Ubuntu upstream *
Moodle Ubuntu utopic *
Moodle Ubuntu vivid *
Moodle Ubuntu wily *
Moodle Ubuntu yakkety *
Moodle Ubuntu zesty *

References