CVE-2016-8643: Medium severity Moodle moodle vulnerability
Published Jan 20, 2017
·Updated
In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.
Affected Software
33 affected components
Moodle moodle<=2.7.16
Moodle moodle=2.8.0
Moodle moodle=2.8.1
Moodle moodle=2.8.2
Moodle moodle=2.8.3
Moodle moodle=2.8.4
Moodle moodle=2.8.5
Moodle moodle=2.8.6
Moodle moodle=2.8.7
Moodle moodle=2.8.8
Moodle moodle=2.8.9
Moodle moodle=2.8.10
Moodle moodle=2.8.11
Moodle moodle=2.8.12
Moodle moodle=2.9.0
Moodle moodle=2.9.1
Moodle moodle=2.9.2
Moodle moodle=2.9.3
Moodle moodle=2.9.4
Moodle moodle=2.9.5
Moodle moodle=2.9.6
Moodle moodle=2.9.7
Moodle moodle=2.9.8
Moodle moodle=3.0.0
Moodle moodle=3.0.1
Moodle moodle=3.0.2
Moodle moodle=3.0.3
Moodle moodle=3.0.4
Moodle moodle=3.0.5
Moodle moodle=3.0.6
Moodle moodle=3.1.0
Moodle moodle=3.1.1
Moodle moodle=3.1.2
Remediation
Patch Available
Event History
Jan 20, 2017
CVE Published
via MITRE·08:39 AM
Data Sourced
via MITRE·08:39 AM
DescriptionWeakness
Data Sourced
via NVD·08:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-8643?
CVE-2016-8643 has a medium severity rating that indicates potential security risks associated with improperly managed user permissions.
2
How do I fix CVE-2016-8643?
To fix CVE-2016-8643, ensure that user permissions are properly configured and apply any available updates from Moodle.
3
Which versions of Moodle are affected by CVE-2016-8643?
CVE-2016-8643 affects multiple versions of Moodle, specifically 2.x and 3.x up to 3.1.2.
4
Can non-admin site managers exploit CVE-2016-8643?
Yes, non-admin site managers may unintentionally edit administrator accounts due to this vulnerability in Moodle.
5
What happens if CVE-2016-8643 is exploited?
Exploiting CVE-2016-8643 could lead to unauthorized changes to admin accounts, potentially compromising the security and integrity of the Moodle site.