CVE-2012-0797: Medium severity moodle vulnerability
Published Jul 17, 2012
·Updated
The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token.
Affected Software
6 affected componentsFixes available
composer/moodle/moodle>=2.0<2.0.7
2.0.7
composer/moodle/moodle>=2.1<2.1.4
2.1.4
composer/moodle/moodle>=2.2<2.2.1
2.2.1
Moodle moodle>=2.0<=2.0.6
Moodle moodle>=2.1<=2.1.3
Moodle moodle=2.2.0
Event History
Jul 17, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
May 13, 2022
Advisory Published
via GitHub·01:13 AM
Frequently Asked Questions
1
What is the severity of CVE-2012-0797?
CVE-2012-0797 is classified as a high severity vulnerability due to the potential for unauthorized access to web services.
2
How do I fix CVE-2012-0797?
To fix CVE-2012-0797, upgrade Moodle to version 2.0.7 or later, 2.1.4 or later, or 2.2.1 or later.
3
Which versions of Moodle are affected by CVE-2012-0797?
Moodle versions 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 are affected by CVE-2012-0797.
4
Is CVE-2012-0797 a remote exploitation vulnerability?
Yes, CVE-2012-0797 allows remote authenticated users to exploit the vulnerability via a token.
5
What can happen if CVE-2012-0797 is not patched?
If CVE-2012-0797 is not patched, attackers may be able to bypass account deletions and access web services.