Lucene search
RedhatCVE-2012-5472HistoryNov 21, 2012 - 12:55 p.m.
CVE-2012-5472
2012-11-2112:55:02
CWE-264
redhat
web.nvd.nist.gov
26
moodle
cve-2012-5472
access restrictions
formslib.php
nvd
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
49.8%
lib/formslib.php in Moodle 2.2.x before 2.2.6 and 2.3.x before 2.3.3 allows remote authenticated users to bypass intended access restrictions via a modified value of a frozen form field.
Affected configurations
Node
moodlemoodleMatch2.2.1
ORmoodlemoodleMatch2.2.2
ORmoodlemoodleMatch2.2.3
ORmoodlemoodleMatch2.2.4
ORmoodlemoodleMatch2.2.5
ORmoodlemoodleMatch2.3.1
ORmoodlemoodleMatch2.3.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| moodle | moodle | 2.2.1 | cpe:2.3:a:moodle:moodle:2.2.1:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.2 | cpe:2.3:a:moodle:moodle:2.2.2:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.3 | cpe:2.3:a:moodle:moodle:2.2.3:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.4 | cpe:2.3:a:moodle:moodle:2.2.4:*:*:*:*:*:*:* |
| moodle | moodle | 2.2.5 | cpe:2.3:a:moodle:moodle:2.2.5:*:*:*:*:*:*:* |
| moodle | moodle | 2.3.1 | cpe:2.3:a:moodle:moodle:2.3.1:*:*:*:*:*:*:* |
| moodle | moodle | 2.3.2 | cpe:2.3:a:moodle:moodle:2.3.2:*:*:*:*:*:*:* |
Related
prion
prion
Design/Logic Flaw
2012-11-21 12:55:00
veracode
veracode
Access Restriction Bypass
2017-06-06 01:40:22
nvd
nvd
CVE-2012-5472
2012-11-21 12:55:02
cvelist
cvelist
CVE-2012-5472
2012-11-21 11:00:00
ubuntucve
ubuntucve
CVE-2012-5472
2012-11-21 00:00:00
nessus
nessus
CVSS2
4
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:S/C:N/I:P/A:N
AI Score
6.3
Confidence
Low
EPSS
0.001
Percentile
49.8%
Related for CVE-2012-5472