Lucene search

K
ubuntucveUbuntu.comUB:CVE-2015-2271
HistoryJun 01, 2015 - 12:00 a.m.

CVE-2015-2271

2015-06-0100:00:00
ubuntu.com
ubuntu.com
7

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

43.9%

tag/user.php in Moodle through 2.5.9, 2.6.x before 2.6.9, 2.7.x before
2.7.6, and 2.8.x before 2.8.4 does not consider the moodle/tag:flag
capability before proceeding with a flaginappropriate action, which allows
remote authenticated users to bypass intended access restrictions via the
“Flag as inappropriate” feature.

4 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:N/I:P/A:N

0.001 Low

EPSS

Percentile

43.9%