CVE-2012-5480
First published: Wed Nov 21 2012(Updated: )
The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before 2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended restrictions on reading other participants' entries via an advanced search.
Credit: secalert@redhat.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Moodle | =2.1.0 | |
| Moodle | =2.1.1 | |
| Moodle | =2.1.2 | |
| Moodle | =2.1.3 | |
| Moodle | =2.1.4 | |
| Moodle | =2.1.5 | |
| Moodle | =2.1.6 | |
| Moodle | =2.1.7 | |
| Moodle | =2.1.8 | |
| Moodle | =2.2.0 | |
| Moodle | =2.2.1 | |
| Moodle | =2.2.2 | |
| Moodle | =2.2.3 | |
| Moodle | =2.2.4 | |
| Moodle | =2.2.5 | |
| Moodle | =2.3.0 | |
| Moodle | =2.3.1 | |
| Moodle | =2.3.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-5480?
CVE-2012-5480 is classified as a medium severity vulnerability allowing unauthorized access to user data.
How do I fix CVE-2012-5480?
To fix CVE-2012-5480, upgrade your Moodle installation to versions 2.1.9, 2.2.6, or 2.3.3 or later.
What are the affected versions for CVE-2012-5480?
CVE-2012-5480 affects Moodle versions 2.1.0 to 2.1.8, 2.2.0 to 2.2.5, and 2.3.0 to 2.3.2.
What type of attack does CVE-2012-5480 enable?
CVE-2012-5480 enables remote attackers to bypass restrictions and read other participants' entries via advanced search.
Who is vulnerable to CVE-2012-5480?
Any Moodle installations running the affected versions prior to the patched releases are vulnerable to CVE-2012-5480.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/description
- agent/author
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/moodle
- canonical/moodle
- version/moodle/2.1.0
- version/moodle/2.1.1
- version/moodle/2.1.2
- version/moodle/2.1.3
- version/moodle/2.1.4
- version/moodle/2.1.5
- version/moodle/2.1.6
- version/moodle/2.1.7
- version/moodle/2.1.8
- version/moodle/2.2.0
- version/moodle/2.2.1
- version/moodle/2.2.2
- version/moodle/2.2.3
- version/moodle/2.2.4
- version/moodle/2.2.5
- version/moodle/2.3.0
- version/moodle/2.3.1
- version/moodle/2.3.2