CVEvulnerability
CVE-2012-5480
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2012-11-21
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:P
- Weaknesses
- CWE-264
Description
The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.
Affected configurations
• moodle moodle 2.1.0
• moodle moodle 2.1.1
• moodle moodle 2.1.2
• moodle moodle 2.1.3
• moodle moodle 2.1.4
• moodle moodle 2.1.5
• moodle moodle 2.1.6
• moodle moodle 2.1.7
• moodle moodle 2.1.8
• moodle moodle 2.2.0
• moodle moodle 2.2.1
• moodle moodle 2.2.2
• moodle moodle 2.2.3
• moodle moodle 2.2.4
• moodle moodle 2.2.5
• moodle moodle 2.3.0
• moodle moodle 2.3.1
• moodle moodle 2.3.2
Related
Weakness · not in database (1)
References
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35558 git.moodle.org
- http://openwall.com/lists/oss-security/2012/11/19/1 openwall.com
- http://www.securityfocus.com/bid/56505 www.securityfocus.com
- https://moodle.org/mod/forum/discuss.php?d=216160 Vendor Advisory
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35558 git.moodle.org
- http://openwall.com/lists/oss-security/2012/11/19/1 openwall.com
- http://www.securityfocus.com/bid/56505 www.securityfocus.com
- https://moodle.org/mod/forum/discuss.php?d=216160 Vendor Advisory