PT-2015-1591 · Moodle · Moodle
Sam Hemelryk
·
Publicado
2015-03-18
·
Atualizado
2022-05-13
·
CVE-2015-2270
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Moodle versions prior to 2.5.9
Moodle versions 2.6.x before 2.6.9
Moodle versions 2.7.x before 2.7.6
Moodle versions 2.8.x before 2.8.4
Description
The issue is related to errors in the code of the lib/moodlelib.php component in the Moodle learning management system. Exploitation of this issue may allow a remote attacker to gain access to protected information. The vulnerability is exploited when the theme uses the blocks-regions feature, and the course state is established at an incorrect point in the login-validation process, allowing remote attackers to obtain sensitive course information.
Recommendations
For Moodle versions prior to 2.5.9, update to version 2.5.9 or later.
For Moodle versions 2.6.x before 2.6.9, update to version 2.6.9 or later.
For Moodle versions 2.7.x before 2.7.6, update to version 2.7.6 or later.
For Moodle versions 2.8.x before 2.8.4, update to version 2.8.4 or later.
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Moodle