CVE-2016-8644: Medium severity Moodle moodle vulnerability
Published Jan 20, 2017
·Updated
In Moodle 2.x and 3.x, the capability to view course notes is checked in the wrong context.
Affected Software
33 affected components
Moodle moodle<=2.7.16
Moodle moodle=2.8.0
Moodle moodle=2.8.1
Moodle moodle=2.8.2
Moodle moodle=2.8.3
Moodle moodle=2.8.4
Moodle moodle=2.8.5
Moodle moodle=2.8.6
Moodle moodle=2.8.7
Moodle moodle=2.8.8
Moodle moodle=2.8.9
Moodle moodle=2.8.10
Moodle moodle=2.8.11
Moodle moodle=2.8.12
Moodle moodle=2.9.0
Moodle moodle=2.9.1
Moodle moodle=2.9.2
Moodle moodle=2.9.3
Moodle moodle=2.9.4
Moodle moodle=2.9.5
Moodle moodle=2.9.6
Moodle moodle=2.9.7
Moodle moodle=2.9.8
Moodle moodle=3.0.0
Moodle moodle=3.0.1
Moodle moodle=3.0.2
Moodle moodle=3.0.3
Moodle moodle=3.0.4
Moodle moodle=3.0.5
Moodle moodle=3.0.6
Moodle moodle=3.1.0
Moodle moodle=3.1.1
Moodle moodle=3.1.2
Remediation
Patch Available
Event History
Jan 20, 2017
CVE Published
via MITRE·08:39 AM
Data Sourced
via MITRE·08:39 AM
DescriptionWeakness
Data Sourced
via NVD·08:59 AM
RemedyDescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-8644?
CVE-2016-8644 is classified as a moderate-level vulnerability.
2
How do I fix CVE-2016-8644?
To fix CVE-2016-8644, upgrade to the latest version of Moodle that addresses this vulnerability.
3
Which versions of Moodle are affected by CVE-2016-8644?
CVE-2016-8644 affects Moodle versions 2.x up to 3.1.2.
4
Can CVE-2016-8644 lead to unauthorized access?
Yes, CVE-2016-8644 can potentially lead to unauthorized access to course notes.
5
Is there a patch available for CVE-2016-8644?
Yes, a patch is provided with the updated versions of Moodle to resolve CVE-2016-8644.