CVE-2012-2359

Опубликовано: 21 июл. 2012

Источник: nvd

CVSS2: 6.5

EPSS Низкий

Описание

admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain privileges by leveraging the teacher role and modifying their own capabilities, as demonstrated by obtaining the backup:userinfo capability.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.0.8:*:*:*:*:*:*:*

Конфигурация 2

Одно из

cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.1.5:*:*:*:*:*:*:*

Конфигурация 3

Одно из

cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.2.2:*:*:*:*:*:*:*

EPSS

Процентиль: 59%

0.00391

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-264

Связанные уязвимости

CVE-2012-2359

ubuntu

почти 13 лет назад

CVE-2012-2359

debian

почти 13 лет назад

admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2. ...

GHSA-jgqm-rhq8-wrjr

github

около 3 лет назад

EPSS

Процентиль: 59%

0.00391

Низкий

6.5 Medium

CVSS2

Дефекты

CWE-264