Описание
The enrol_meta_sync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to obtain manager privileges in opportunistic circumstances by leveraging incorrect role processing during a long-running sync script.
| Релиз | Статус | Примечание |
|---|---|---|
| artful | ignored | end of life |
| bionic | not-affected | 3.0.3+dfsg-0ubuntu1 |
| cosmic | not-affected | 3.0.3+dfsg-0ubuntu1 |
| devel | not-affected | 3.0.3+dfsg-0ubuntu1 |
| disco | not-affected | 3.0.3+dfsg-0ubuntu1 |
| esm-apps/bionic | not-affected | 3.0.3+dfsg-0ubuntu1 |
| esm-apps/xenial | not-affected | 3.0.3+dfsg-0ubuntu1 |
| esm-infra-legacy/trusty | DNE | trusty/esm was DNE [trusty was needed] |
| precise | ignored | end of life |
| precise/esm | DNE | precise was needed |
Показывать по
EPSS
4.9 Medium
CVSS2
6.8 Medium
CVSS3
Связанные уязвимости
The enrol_meta_sync function in enrol/meta/locallib.php in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to obtain manager privileges in opportunistic circumstances by leveraging incorrect role processing during a long-running sync script.
The enrol_meta_sync function in enrol/meta/locallib.php in Moodle thro ...
Moodle allows attackers to obtain manager privileges
Уязвимость системы управления обучением Мoodle, позволяющая нарушителю повысить свои привилегии
EPSS
4.9 Medium
CVSS2
6.8 Medium
CVSS3