PT-2019-11600 · Moodle+1 · Moodle+1

Mazen Gamal · Publicado 2019-06-18 · Atualizado 2022-05-24 · CVE-2019-10154

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Moodle versions prior to 3.7 Moodle versions prior to 3.6.4

Description: A flaw was found in a web service that fetches messages, which was not restricted to the current user's conversations.

Recommendations: For versions prior to 3.7, update to version 3.7 or later. For versions prior to 3.6.4, update to version 3.6.4 or later.

Correção

Improper Authorization

Enumeração de Fraquezas

CWE-285

Identificadores relacionados

ALT-PU-2019-2080

ALT-PU-2019-2096

CVE-2019-10154

GHSA-WW45-X87C-WGFF

Produtos afetados

Alt Linux

Moodle

Referências · 8

• https://github.com/moodle/moodle · Nota
• https://github.com/moodle/moodle/commit/2904a7f851da8e66be12f41d55068bf07817fbd6 · Nota
• https://github.com/moodle/moodle/commit/a3d19efab4aff83c07db9f0ad34c8f0e1f29c64c · Nota
• https://osv.dev/vulnerability/GHSA-ww45-x87c-wgff · Aviso do Fabricante
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10154 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10154 · Nota de Segurança
• https://moodle.org/mod/forum/discuss.php?d=386521 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-10154 · Aviso do Fabricante