CVE-2012-6102: Medium severity moodle vulnerability
Published Jan 27, 2013
·Updated
lib.php in the Submission comments plugin in the Assignment module in Moodle 2.3.x before 2.3.4 and 2.4.x before 2.4.1 allows remote attackers to read or modify the submission comments (aka feedback comments) of arbitrary users via a crafted URI.
Affected Software
5 affected components
Moodle moodle=2.3.0
Moodle moodle=2.3.1
Moodle moodle=2.3.2
Moodle moodle=2.3.3
Moodle moodle=2.4.0
Event History
Jan 27, 2013
CVE Published
via MITRE·10:00 PM
Data Sourced
via MITRE·10:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-6102?
CVE-2012-6102 is considered a medium severity vulnerability due to its potential to allow unauthorized access to submission comments.
2
How do I fix CVE-2012-6102?
To fix CVE-2012-6102, upgrade Moodle to version 2.3.4 or 2.4.1 or later.
3
Who is affected by CVE-2012-6102?
Users of Moodle versions 2.3.0 to 2.3.3 and 2.4.0 are affected by CVE-2012-6102.
4
What is the impact of CVE-2012-6102?
The impact of CVE-2012-6102 allows remote attackers to read or alter submission comments of arbitrary users.
5
What type of vulnerability is CVE-2012-6102?
CVE-2012-6102 is classified as an improper access control vulnerability.