PT-2017-17790 · Moodle · Moodle

Thomas Jaisson · Publicado 2017-07-17 · Atualizado 2022-05-13 · CVE-2017-7532

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions 3.x

Description The issue allows course creators to modify system default settings for courses.

Recommendations For Moodle versions 3.x, restrict course creators' access to system default settings to prevent unauthorized changes.

Correção

Improper Privilege Management

Enumeração de Fraquezas

CWE-269

Identificadores relacionados

CVE-2017-7532

GHSA-JJHX-5JFF-RC8M

Produtos afetados

Moodle

Referências · 12

• https://github.com/moodle/moodle · Nota
• https://github.com/moodle/moodle/commit/6e861be6b7d49c5ac4583ae46762a28ede5785ad · Nota
• https://github.com/moodle/moodle/commit/915f801546a5c3618feab897072c985abfce57df · Nota
• https://osv.dev/vulnerability/GHSA-jjhx-5jff-rc8m · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-7532 · Aviso do Fabricante
• https://web.archive.org/web/20210614032706/http://securityfocus.com/bid/99617 · Nota
• https://moodle.org/mod/forum/discuss.php?d=355556 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7532 · Nota de Segurança
• https://ubuntu.com/security/CVE-2017-7532 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2017-7532 · Nota de Segurança
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-7532 · Aviso do Fabricante
• http://securityfocus.com/bid/99617 · Nota