CVE-2016-2155

Published: May 22, 2016Modified: May 6, 2026

4.3

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Exploitability: 2.8 / Impact: 1.4

Source: NVD

Description

The grade-reporting feature in Singleview (aka Single View) in Moodle 2.8.x before 2.8.11, 2.9.x before 2.9.5, and 3.0.x before 3.0.3 does not consider the moodle/grade:manage capability, which allows remote authenticated users to modify "Exclude grade" settings by leveraging the Non-Editing Instructor role.

Affected (19)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

19 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.8.0
Moodle Moodle	Version 2.8.10
Moodle Moodle	Version 2.8.1
Moodle Moodle	Version 2.8.2
Moodle Moodle	Version 2.8.3
Moodle Moodle	Version 2.8.4
Moodle Moodle	Version 2.8.5
Moodle Moodle	Version 2.8.6
Moodle Moodle	Version 2.8.7
Moodle Moodle	Version 2.8.8
Moodle Moodle	Version 2.8.9
Moodle Moodle	Version 2.9.0
Moodle Moodle	Version 2.9.1
Moodle Moodle	Version 2.9.2
Moodle Moodle	Version 2.9.3
Moodle Moodle	Version 2.9.4
Moodle Moodle	Version 3.0.0
Moodle Moodle	Version 3.0.1
Moodle Moodle	Version 3.0.2