Lucene search

[email protected]NVD:CVE-2012-2367

HistoryJul 21, 2012 - 3:38 a.m.

CVE-2012-2367

2012-07-2103:38:56

CWE-264

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

AI Score

Confidence

Low

EPSS

0.004

Percentile

72.7%

JSON

Moodle 1.9.x before 1.9.18, 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass the moodle/calendar:manageownentries capability requirement and add a calendar entry via a New Entry action.

Affected configurations

Nvd

Node

moodlemoodleMatch1.9.1

moodlemoodleMatch1.9.2

moodlemoodleMatch1.9.3

moodlemoodleMatch1.9.4

moodlemoodleMatch1.9.5

moodlemoodleMatch1.9.6

moodlemoodleMatch1.9.7

moodlemoodleMatch1.9.8

moodlemoodleMatch1.9.9

moodlemoodleMatch1.9.10

moodlemoodleMatch1.9.11

moodlemoodleMatch1.9.12

moodlemoodleMatch1.9.13

moodlemoodleMatch1.9.14

moodlemoodleMatch1.9.15

moodlemoodleMatch1.9.16

moodlemoodleMatch1.9.17

Node

moodlemoodleMatch2.0.0

moodlemoodleMatch2.0.1

moodlemoodleMatch2.0.2

moodlemoodleMatch2.0.3

moodlemoodleMatch2.0.4

moodlemoodleMatch2.0.5

moodlemoodleMatch2.0.6

moodlemoodleMatch2.0.7

moodlemoodleMatch2.0.8

Node

moodlemoodleMatch2.1.0

moodlemoodleMatch2.1.1

moodlemoodleMatch2.1.2

moodlemoodleMatch2.1.3

moodlemoodleMatch2.1.4

moodlemoodleMatch2.1.5

Node

moodlemoodleMatch2.2.0

moodlemoodleMatch2.2.1

moodlemoodleMatch2.2.2

VendorProductVersionCPE
moodlemoodle1.9.1cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*
moodlemoodle1.9.2cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*
moodlemoodle1.9.3cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*
moodlemoodle1.9.4cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*
moodlemoodle1.9.5cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*
moodlemoodle1.9.6cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*
moodlemoodle1.9.7cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:*
moodlemoodle1.9.8cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:*
moodlemoodle1.9.9cpe:2.3:a:moodle:moodle:1.9.9:*:*:*:*:*:*:*
moodlemoodle1.9.10cpe:2.3:a:moodle:moodle:1.9.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
moodle	moodle	1.9.1	cpe:2.3:a:moodle:moodle:1.9.1:::::::*
moodle	moodle	1.9.2	cpe:2.3:a:moodle:moodle:1.9.2:::::::*
moodle	moodle	1.9.3	cpe:2.3:a:moodle:moodle:1.9.3:::::::*
moodle	moodle	1.9.4	cpe:2.3:a:moodle:moodle:1.9.4:::::::*
moodle	moodle	1.9.5	cpe:2.3:a:moodle:moodle:1.9.5:::::::*
moodle	moodle	1.9.6	cpe:2.3:a:moodle:moodle:1.9.6:::::::*
moodle	moodle	1.9.7	cpe:2.3:a:moodle:moodle:1.9.7:::::::*
moodle	moodle	1.9.8	cpe:2.3:a:moodle:moodle:1.9.8:::::::*
moodle	moodle	1.9.9	cpe:2.3:a:moodle:moodle:1.9.9:::::::*
moodle	moodle	1.9.10	cpe:2.3:a:moodle:moodle:1.9.10:::::::*