CVE-2012-2358: Medium severity moodle vulnerability
Published Jul 21, 2012
·Updated
Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity's read-only state and modify the database by leveraging the student role and editing database activity entries that already exist.
Affected Software
18 affected components
Moodle moodle=2.0.0
Moodle moodle=2.0.1
Moodle moodle=2.0.2
Moodle moodle=2.0.3
Moodle moodle=2.0.4
Moodle moodle=2.0.5
Moodle moodle=2.0.6
Moodle moodle=2.0.7
Moodle moodle=2.0.8
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Moodle moodle=2.1.2
Moodle moodle=2.1.3
Moodle moodle=2.1.4
Moodle moodle=2.1.5
Moodle moodle=2.2.0
Moodle moodle=2.2.1
Moodle moodle=2.2.2
Event History
Jul 21, 2012
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2358?
CVE-2012-2358 is considered a medium severity vulnerability.
2
How do I fix CVE-2012-2358?
To fix CVE-2012-2358, you should upgrade Moodle to version 2.0.9, 2.1.6, or 2.2.3 or later.
3
Who is affected by CVE-2012-2358?
CVE-2012-2358 affects users of Moodle versions 2.0.x prior to 2.0.9, 2.1.x prior to 2.1.6, and 2.2.x prior to 2.2.3.
4
What actions can attackers take due to CVE-2012-2358?
Attackers can bypass a read-only activity's restrictions and modify existing database entries.
5
Is CVE-2012-2358 a remote or local vulnerability?
CVE-2012-2358 is a remote vulnerability that requires authenticated access to exploit.