CVE-2012-4408: Medium severity Moodle moodle vulnerability

Published Sep 19, 2012

Updated

course/reset.php in Moodle 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2 checks an update capability instead of a reset capability, which allows remote authenticated users to bypass intended access restrictions via a reset operation.

Affected Software

15 affected components

Moodle moodle=2.1.0

Moodle moodle=2.1.1

Moodle moodle=2.1.2

Moodle moodle=2.1.3

Moodle moodle=2.1.4

Moodle moodle=2.1.5

Moodle moodle=2.1.6

Moodle moodle=2.1.7

Moodle moodle=2.2.0

Moodle moodle=2.2.1

Moodle moodle=2.2.2

Moodle moodle=2.2.3

Moodle moodle=2.2.4

Moodle moodle=2.3.0

Moodle moodle=2.3.1

Remediation

Patch Available

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-34519

Event History

Sep 19, 2012

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2012-4408?

CVE-2012-4408 is considered to be of medium severity due to the potential for unauthorized access by authenticated users.

How do I fix CVE-2012-4408?

To fix CVE-2012-4408, upgrade your Moodle installation to version 2.1.8, 2.2.5, or 2.3.2 or later.

Which versions of Moodle are affected by CVE-2012-4408?

CVE-2012-4408 affects Moodle versions 2.1.x before 2.1.8, 2.2.x before 2.2.5, and 2.3.x before 2.3.2.

What does CVE-2012-4408 exploit in Moodle?

CVE-2012-4408 exploits a flaw in the permission checks in the course/reset.php file, allowing users to bypass reset capability restrictions.

Can CVE-2012-4408 be exploited remotely?

Yes, CVE-2012-4408 can be exploited remotely by authenticated users who have access to the reset operation.