CVE-2012-3388

Published: Jul 23, 2012Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:N/I:P/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.

Affected (5)

Products: Moodle: Moodle

1 product

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.2.0
Moodle Moodle	Version 2.2.1
Moodle Moodle	Version 2.2.2
Moodle Moodle	Version 2.2.3
Moodle Moodle	Version 2.3.0

Related CWEs

References (10)

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33916

Source: secalert@redhat.com

http://openwall.com/lists/oss-security/2012/07/17/1

Source: secalert@redhat.com

http://secunia.com/advisories/49890

Source: secalert@redhat.com

http://www.securityfocus.com/bid/54481

Source: secalert@redhat.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/76955

Source: secalert@redhat.com

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-33916

Source: af854a3a-2127-422b-91ae-364da2661108

http://openwall.com/lists/oss-security/2012/07/17/1

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/49890

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/54481

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/76955

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.