CVE-2012-2358

Published: Jul 21, 2012Modified: Apr 29, 2026

5.5

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:P

Exploitability: 8.0 / Impact: 4.9

Source: NVD

Description

Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to bypass an activity's read-only state and modify the database by leveraging the student role and editing database activity entries that already exist.

Affected (18)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.0.0
Moodle Moodle	Version 2.0.1
Moodle Moodle	Version 2.0.2
Moodle Moodle	Version 2.0.3
Moodle Moodle	Version 2.0.4
Moodle Moodle	Version 2.0.5
Moodle Moodle	Version 2.0.6
Moodle Moodle	Version 2.0.7
Moodle Moodle	Version 2.0.8

Configuration B

6 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.1.0
Moodle Moodle	Version 2.1.1
Moodle Moodle	Version 2.1.2
Moodle Moodle	Version 2.1.3
Moodle Moodle	Version 2.1.4
Moodle Moodle	Version 2.1.5

Configuration C

3 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.2.0
Moodle Moodle	Version 2.2.1
Moodle Moodle	Version 2.2.2

Related CWEs

CWE-264

References (4)

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-31811

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/05/23/2

Source: secalert@redhat.com

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-31811

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/05/23/2

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.