CVE-2012-0798: Medium severity moodle vulnerability
The self-enrolment functionality in Moodle 2.1.x before 2.1.4 and 2.2.x before 2.2.1 allows remote authenticated users to obtain the manager role by leveraging the teacher role.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2012-0798?
CVE-2012-0798 is considered a high severity vulnerability due to its potential to allow unauthorized users to escalate privileges.
How do I fix CVE-2012-0798?
To fix CVE-2012-0798, upgrade to Moodle version 2.1.4 or later, or 2.2.1 or later, which includes the necessary security patches.
What versions of Moodle are affected by CVE-2012-0798?
CVE-2012-0798 affects Moodle versions 2.1.0 to 2.1.3 and 2.2.0.
Who can exploit CVE-2012-0798?
Remote authenticated users with the teacher role can exploit CVE-2012-0798 to gain unauthorized administrative access.
What are the consequences of CVE-2012-0798?
Exploiting CVE-2012-0798 can allow unauthorized users to assume the manager role, leading to potential data breaches and loss of control over the Moodle environment.