CVE-2011-4288
First published: Mon Jul 16 2012(Updated: )
Moodle 1.9.x before 1.9.12 and 2.0.x before 2.0.3 does not properly implement associations between teachers and groups, which allows remote authenticated users to read quiz reports of arbitrary students by leveraging the teacher role.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moodle | =1.9.2 | |
| Moodle | =1.9.3 | |
| Moodle | =1.9.4 | |
| Moodle | =1.9.5 | |
| Moodle | =1.9.6 | |
| Moodle | =1.9.7 | |
| Moodle | =1.9.8 | |
| Moodle | =1.9.9 | |
| Moodle | =1.9.10 | |
| Moodle | =1.9.11 | |
| Moodle | =2.0.0 | |
| Moodle | =2.0.1 | |
| Moodle | =2.0.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2011-4288?
CVE-2011-4288 has a moderate severity rating due to its potential to expose sensitive quiz reports.
How do I fix CVE-2011-4288?
To fix CVE-2011-4288, update Moodle to version 1.9.12 or later, or 2.0.3 or later.
Which versions of Moodle are affected by CVE-2011-4288?
CVE-2011-4288 affects Moodle versions 1.9.x before 1.9.12 and 2.0.x before 2.0.3.
What type of vulnerability is CVE-2011-4288?
CVE-2011-4288 is a privilege escalation vulnerability that allows unauthorized access to quiz reports.
Who can exploit CVE-2011-4288?
Remote authenticated users with a teacher role can exploit CVE-2011-4288 to read quiz reports of arbitrary students.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/moodle
- canonical/moodle
- version/moodle/1.9.2
- version/moodle/1.9.3
- version/moodle/1.9.4
- version/moodle/1.9.5
- version/moodle/1.9.6
- version/moodle/1.9.7
- version/moodle/1.9.8
- version/moodle/1.9.9
- version/moodle/1.9.10
- version/moodle/1.9.11
- version/moodle/2.0.0
- version/moodle/2.0.1
- version/moodle/2.0.2