First published: Fri Jul 20 2012(Updated: )
The web services implementation in Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 does not properly consider the maintenance-mode state and account attributes during login attempts, which allows remote authenticated users to bypass intended access restrictions by connecting to a webservice server.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Moodle Moodle | =2.0.2 | |
Moodle Moodle | =2.0.1 | |
Moodle Moodle | =2.0.4 | |
Moodle Moodle | =2.0.3 | |
Moodle Moodle | =2.0.5 | |
Moodle Moodle | =2.0.0 | |
Moodle Moodle | =2.1.2 | |
Moodle Moodle | =2.1.1 | |
Moodle Moodle | =2.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.