Lucene search

K
ubuntucveUbuntu.comUB:CVE-2012-2358
HistoryJul 21, 2012 - 12:00 a.m.

CVE-2012-2358

2012-07-2100:00:00
ubuntu.com
ubuntu.com
8

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

0.002

Percentile

52.6%

Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3
allows remote authenticated users to bypass an activity’s read-only state
and modify the database by leveraging the student role and editing database
activity entries that already exist.

Notes

Author Note
jdstrand moodle 2.0 and higher

CVSS2

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:P/A:P

EPSS

0.002

Percentile

52.6%