CVE-2004-2234: High severity moodle vulnerability
Published Dec 31, 2004
·Updated
Unknown vulnerability in Moodle before 1.2 allows teachers to log in as administrators.
Affected Software
2 affected components
Moodle moodle=1.1.1
Moodle moodle=1.1.1
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Jul 17, 2005
CVE Published
via MITRE·04:00 AM
Data Sourced
via MITRE·04:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2234?
The severity of CVE-2004-2234 is considered low as it allows teachers to log in as administrators without additional privileges.
2
How do I fix CVE-2004-2234?
To fix CVE-2004-2234, upgrade Moodle to version 1.2 or later to ensure proper user authentication.
3
Which versions of Moodle are affected by CVE-2004-2234?
Moodle versions prior to 1.2, specifically 1.1.1 and earlier, are affected by CVE-2004-2234.
4
Can CVE-2004-2234 be exploited by regular users?
Yes, CVE-2004-2234 can be exploited by teachers who have access to log in, allowing them to gain unauthorized administrative access.
5
What impact does CVE-2004-2234 have on Moodle users?
CVE-2004-2234 impacts Moodle users by potentially allowing unauthorized users to access sensitive administrative functions.