PT-2016-1296 · Moodle · Moodle

Juan Leyva

·

Publicado

2015-09-23

·

Atualizado

2022-05-13

·

CVE-2015-5268

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Moodle versions 2.6.11 and earlier, 2.7.x prior to 2.7.10, 2.8.x prior to 2.8.8, 2.9.x prior to 2.9.2
Description The issue is related to inadequate access control in the rating component of the Moodle learning management system. This allows a remote attacker to obtain sensitive information by reading a rating value due to mishandled group-based authorization checks.
Recommendations For versions 2.6.11 and earlier, update to a version later than 2.6.11. For versions 2.7.x prior to 2.7.10, update to version 2.7.10 or later. For versions 2.8.x prior to 2.8.8, update to version 2.8.8 or later. For versions 2.9.x prior to 2.9.2, update to version 2.9.2 or later.

Correção

Information Disclosure

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-264CWE-200

Identificadores relacionados

BDU:2016-00593
CVE-2015-5268
GHSA-H34C-PX28-RJGW
MGASA-2015-0381

Produtos afetados

Moodle