CVE-2012-2366: Medium severity moodle vulnerability
Published Jul 21, 2012
·Updated
mod/data/preset.php in Moodle 2.1.x before 2.1.6 and 2.2.x before 2.2.3 does not properly iterate through an array, which allows remote authenticated users to overwrite arbitrary database activity presets via unspecified vectors.
Affected Software
9 affected components
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Moodle moodle=2.1.2
Moodle moodle=2.1.3
Moodle moodle=2.1.4
Moodle moodle=2.1.5
Moodle moodle=2.2.0
Moodle moodle=2.2.1
Moodle moodle=2.2.2
Event History
Jul 21, 2012
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-2366?
CVE-2012-2366 is classified as a medium severity vulnerability due to the potential for unauthorized database modifications.
2
How do I fix CVE-2012-2366?
To fix CVE-2012-2366, you should upgrade to Moodle versions 2.1.6 or 2.2.3 or later.
3
Who is affected by CVE-2012-2366?
CVE-2012-2366 affects users of Moodle versions 2.1.x before 2.1.6 and 2.2.x before 2.2.3.
4
What type of vulnerability is CVE-2012-2366?
CVE-2012-2366 is a data integrity vulnerability allowing remote authenticated users to overwrite database activity presets.
5
What versions of Moodle contain CVE-2012-2366?
CVE-2012-2366 is present in Moodle versions 2.1.0 through 2.1.5 and 2.2.0 through 2.2.2.