CVE-2010-1616: Medium severity Moodle moodle vulnerability
Published Apr 29, 2010
·Updated
Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring a course, which allows teachers to create new accounts even if they do not have the moodle/user:create capability.
Affected Software
20 affected componentsFixes available
composer/moodle/moodle>=1.9.0<1.9.8
1.9.8
composer/moodle/moodle>=1.8.0<1.8.12
1.8.12
Moodle moodle=1.8.1
Moodle moodle=1.8.2
Moodle moodle=1.8.3
Moodle moodle=1.8.4
Moodle moodle=1.8.5
Moodle moodle=1.8.6
Moodle moodle=1.8.7
Moodle moodle=1.8.8
Moodle moodle=1.8.9
Moodle moodle=1.8.10
Moodle moodle=1.8.11
Moodle moodle=1.9.1
Moodle moodle=1.9.2
Moodle moodle=1.9.3
Moodle moodle=1.9.4
Moodle moodle=1.9.5
Moodle moodle=1.9.6
Moodle moodle=1.9.7
Event History
Apr 29, 2010
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:30 PM
DescriptionSeverityAffected Software
May 13, 2022
Advisory Published
via GitHub·01:13 AM
Frequently Asked Questions
1
What is the severity of CVE-2010-1616?
CVE-2010-1616 is considered a medium severity vulnerability due to its potential to allow unauthorized role creation.
2
How do I fix CVE-2010-1616?
To fix CVE-2010-1616, upgrade to Moodle version 1.9.8 or 1.8.12.
3
What versions of Moodle are affected by CVE-2010-1616?
CVE-2010-1616 affects Moodle versions 1.8.x and 1.9.x prior to 1.9.8.
4
What is the impact of CVE-2010-1616?
The impact of CVE-2010-1616 is that it allows teachers to create new user accounts without the necessary permissions.
5
Who is impacted by CVE-2010-1616?
Organizations using affected versions of Moodle may face security risks if teachers can create unauthorized accounts.