CVE-2008-6125: Medium severity Moodle Moodle vulnerability
Published Feb 13, 2009
·Updated
Unspecified vulnerability in the user editing interface in Moodle 1.5.x, 1.6 before 1.6.6, and 1.7 before 1.7.3 allows remote authenticated users to gain privileges via unknown vectors.
Affected Software
4 affected components
Moodle Moodle>=1.5<=1.5.4
Moodle Moodle>=1.6<1.6.6
Moodle Moodle>=1.7<1.7.3
Debian Debian Linux=4.0
Remediation
Patch Available
Event History
Feb 13, 2009
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Data Sourced
via NVD·01:30 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6125?
CVE-2008-6125 is classified as a moderate severity vulnerability that allows remote authenticated users to escalate privileges.
2
How do I fix CVE-2008-6125?
To fix CVE-2008-6125, upgrade Moodle to version 1.6.6 or later, or 1.7.3 or later.
3
Which versions of Moodle are affected by CVE-2008-6125?
CVE-2008-6125 affects Moodle versions from 1.5.x to before 1.6.6 and versions before 1.7.3.
4
Is Debian Linux affected by CVE-2008-6125?
Debian Linux 4.0 is affected by CVE-2008-6125 when running the vulnerable versions of Moodle.
5
Who can exploit CVE-2008-6125?
CVE-2008-6125 can be exploited by any remote authenticated user in Moodle, allowing them to gain elevated privileges.