CVE-2012-1157: Medium severity moodle vulnerability
Moodle before 2.2.2 default settings allowed all repositories to be viewable by all authenticated users.
Other sources
Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default
— Debian
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2012-1157?
CVE-2012-1157 is classified as a medium severity vulnerability due to its potential for unauthorized access to sensitive repository data.
How do I fix CVE-2012-1157?
To fix CVE-2012-1157, upgrade Moodle to version 2.2.2 or later to ensure proper repository settings.
Which versions of Moodle are affected by CVE-2012-1157?
Moodle versions prior to 2.2.2, including 1.9.17, 2.0.8, and 2.1.5, are affected by CVE-2012-1157.
What type of vulnerability is CVE-2012-1157?
CVE-2012-1157 is a configuration issue that allows all authenticated users to view all repositories by default.
Is my installation vulnerable to CVE-2012-1157?
If you are running Moodle version below 2.2.2, your installation is vulnerable to CVE-2012-1157.