Lucene search

RedhatCVE-2012-2358

HistoryJul 21, 2012 - 3:38 a.m.

CVE-2012-2358

2012-07-2103:38:55

CWE-264

redhat

web.nvd.nist.gov

moodle

cve-2012-2358

security vulnerability

remote authentication

database modification

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

AI Score

6.1

Confidence

Low

EPSS

0.002

Percentile

52.6%

JSON

Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity’s read-only state and modify the database by leveraging the student role and editing database activity entries that already exist.

Affected configurations

Nvd

Node

moodlemoodleMatch2.0.0

moodlemoodleMatch2.0.1

moodlemoodleMatch2.0.2

moodlemoodleMatch2.0.3

moodlemoodleMatch2.0.4

moodlemoodleMatch2.0.5

moodlemoodleMatch2.0.6

moodlemoodleMatch2.0.7

moodlemoodleMatch2.0.8

Node

moodlemoodleMatch2.1.0

moodlemoodleMatch2.1.1

moodlemoodleMatch2.1.2

moodlemoodleMatch2.1.3

moodlemoodleMatch2.1.4

moodlemoodleMatch2.1.5

Node

moodlemoodleMatch2.2.0

moodlemoodleMatch2.2.1

moodlemoodleMatch2.2.2

VendorProductVersionCPE
moodlemoodle2.0.0cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*
moodlemoodle2.0.1cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*
moodlemoodle2.0.2cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:*
moodlemoodle2.0.3cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:*
moodlemoodle2.0.4cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:*
moodlemoodle2.0.5cpe:2.3:a:moodle:moodle:2.0.5:*:*:*:*:*:*:*
moodlemoodle2.0.6cpe:2.3:a:moodle:moodle:2.0.6:*:*:*:*:*:*:*
moodlemoodle2.0.7cpe:2.3:a:moodle:moodle:2.0.7:*:*:*:*:*:*:*
moodlemoodle2.0.8cpe:2.3:a:moodle:moodle:2.0.8:*:*:*:*:*:*:*
moodlemoodle2.1.0cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moodle	moodle	2.0.0	cpe:2.3:a:moodle:moodle:2.0.0:::::::*
moodle	moodle	2.0.1	cpe:2.3:a:moodle:moodle:2.0.1:::::::*
moodle	moodle	2.0.2	cpe:2.3:a:moodle:moodle:2.0.2:::::::*
moodle	moodle	2.0.3	cpe:2.3:a:moodle:moodle:2.0.3:::::::*
moodle	moodle	2.0.4	cpe:2.3:a:moodle:moodle:2.0.4:::::::*
moodle	moodle	2.0.5	cpe:2.3:a:moodle:moodle:2.0.5:::::::*
moodle	moodle	2.0.6	cpe:2.3:a:moodle:moodle:2.0.6:::::::*
moodle	moodle	2.0.7	cpe:2.3:a:moodle:moodle:2.0.7:::::::*
moodle	moodle	2.0.8	cpe:2.3:a:moodle:moodle:2.0.8:::::::*
moodle	moodle	2.1.0	cpe:2.3:a:moodle:moodle:2.1.0:::::::*