CVEvulnerability
CVE-2015-5264
5.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2016-02-22
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 5.4 MEDIUM — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 5.5 MEDIUM — AV:N/AC:L/Au:S/C:P/I:P/A:N
- Weaknesses
- CWE-264
Description
The lesson module in Moodle through 2.6.11, 2.7.x before 2.7.10, 2.8.x before 2.8.8, and 2.9.x before 2.9.2 allows remote authenticated users to bypass intended access restrictions and enter additional answer attempts by leveraging the student role.
Affected configurations
• moodle moodle (<= 2.6.11)
• moodle moodle 2.7.0
• moodle moodle 2.7.1
• moodle moodle 2.7.2
• moodle moodle 2.7.3
• moodle moodle 2.7.4
• moodle moodle 2.7.5
• moodle moodle 2.7.6
• moodle moodle 2.7.7
• moodle moodle 2.7.8
• moodle moodle 2.7.9
• moodle moodle 2.8.0
• moodle moodle 2.8.1
• moodle moodle 2.8.2
• moodle moodle 2.8.3
• moodle moodle 2.8.4
• moodle moodle 2.8.5
• moodle moodle 2.8.6
• moodle moodle 2.8.7
• moodle moodle 2.9.0
• moodle moodle 2.9.1
Related
Weakness · not in database (1)
References
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50516 git.moodle.org
- http://www.openwall.com/lists/oss-security/2015/09/21/1 www.openwall.com
- http://www.securitytracker.com/id/1033619 www.securitytracker.com
- https://moodle.org/mod/forum/discuss.php?d=320287 Vendor Advisory
- http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50516 git.moodle.org
- http://www.openwall.com/lists/oss-security/2015/09/21/1 www.openwall.com
- http://www.securitytracker.com/id/1033619 www.securitytracker.com
- https://moodle.org/mod/forum/discuss.php?d=320287 Vendor Advisory