Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4744
HistoryJul 27, 2017 - 5:38 a.m.

Privilege Escalation

2017-07-2705:38:49
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9

EPSS

0.002

Percentile

51.6%

Moodle is vulnerable to privilege escalations. On big installations, when the sync script was run it would improperly assign a manager role to suspended student accounts, granting these accounts the same access rights as a manager role.