CVE-2012-0793: Medium severity moodle vulnerability
Published Jul 17, 2012
·Updated
Moodle 1.9.x before 1.9.16, 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote attackers to view the profile images of arbitrary user accounts via unspecified vectors.
Affected Software
27 affected components
Moodle moodle=1.9.1
Moodle moodle=1.9.2
Moodle moodle=1.9.3
Moodle moodle=1.9.4
Moodle moodle=1.9.5
Moodle moodle=1.9.6
Moodle moodle=1.9.7
Moodle moodle=1.9.8
Moodle moodle=1.9.9
Moodle moodle=1.9.10
Moodle moodle=1.9.11
Moodle moodle=1.9.12
Moodle moodle=1.9.13
Moodle moodle=1.9.14
Moodle moodle=1.9.15
Moodle moodle=2.0.0
Moodle moodle=2.0.1
Moodle moodle=2.0.2
Moodle moodle=2.0.3
Moodle moodle=2.0.4
Moodle moodle=2.0.5
Moodle moodle=2.0.6
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Moodle moodle=2.1.2
Moodle moodle=2.1.3
Moodle moodle=2.2.0
Event History
Jul 17, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0793?
CVE-2012-0793 is categorized as a medium severity vulnerability that allows unauthorized access to user profile images.
2
How do I fix CVE-2012-0793?
To fix CVE-2012-0793, upgrade to Moodle versions 1.9.16, 2.0.7, 2.1.4, or 2.2.1 or later.
3
Which Moodle versions are affected by CVE-2012-0793?
CVE-2012-0793 affects Moodle versions 1.9.x prior to 1.9.16, 2.0.x prior to 2.0.7, 2.1.x prior to 2.1.4, and 2.2.x prior to 2.2.1.
4
What kind of attack does CVE-2012-0793 enable?
CVE-2012-0793 enables remote attackers to view profile images of arbitrary user accounts.
5
Is CVE-2012-0793 a local or remote vulnerability?
CVE-2012-0793 is classified as a remote vulnerability since it can be exploited over the network.