CVE-2011-4295

CVE-2011-4295 affects Moodle’s enrolment external API: the function moodle_enrol_external:role_assign in enrol/externallib.php lacks an authorization check in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1, allowing remote authenticated users to escalate privileges by assigning roles. The issue...

CVE-2011-4295: Undefined Security Weakness

The moodleenrolexternal:roleassign function in enrol/externallib.php in Moodle 2.0.x before 2.0.4 and 2.1.x before 2.1.1 does not have an authorization check, which allows remote authenticated users to gain privileges by making a role assignment...