CVE-2012-5471: Medium severity moodle vulnerability
Published Nov 21, 2012
·Updated
The Dropbox Repository File Picker in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote authenticated users to access the Dropbox of a different user by leveraging an unattended workstation after a logout.
Affected Software
21 affected componentsFixes available
composer/moodle/moodle>=2.1<=2.1.8
2.1.9
composer/moodle/moodle>=2.2<=2.2.5
2.2.6
composer/moodle/moodle>=2.3<=2.3.2
2.3.3
Moodle moodle=2.1.0
Moodle moodle=2.1.1
Moodle moodle=2.1.2
Moodle moodle=2.1.3
Moodle moodle=2.1.4
Moodle moodle=2.1.5
Moodle moodle=2.1.6
Moodle moodle=2.1.7
Moodle moodle=2.1.8
Moodle moodle=2.2.0
Moodle moodle=2.2.1
Moodle moodle=2.2.2
Moodle moodle=2.2.3
Moodle moodle=2.2.4
Moodle moodle=2.2.5
Moodle moodle=2.3.0
Moodle moodle=2.3.1
Moodle moodle=2.3.2
Remediation
Event History
Nov 21, 2012
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
May 13, 2022
Advisory Published
via GitHub·01:13 AM
Frequently Asked Questions
1
What is the severity of CVE-2012-5471?
CVE-2012-5471 has a medium severity rating as it allows unauthorized access to sensitive user data.
2
How do I fix CVE-2012-5471?
You can fix CVE-2012-5471 by upgrading to Moodle version 2.1.9, 2.2.6, or 2.3.3 or later.
3
What systems are affected by CVE-2012-5471?
CVE-2012-5471 affects Moodle versions 2.1.x prior to 2.1.9, 2.2.x prior to 2.2.6, and 2.3.x prior to 2.3.3.
4
What type of attack does CVE-2012-5471 describe?
CVE-2012-5471 describes an unauthorized access attack that exploits unattended workstations after logout.
5
Who can exploit CVE-2012-5471?
Remote authenticated users can exploit CVE-2012-5471 to access the Dropbox of other users.