PT-2019-5259 · Moodle+1 · Moodle+1

David Monllaó · Publicado 2019-07-03 · Atualizado 2022-05-24 · CVE-2019-10189

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Média

Vetor base

AV:N/AC:L/Au:S/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions moodle versions prior to 3.7.1 moodle versions prior to 3.6.5 moodle versions prior to 3.5.7

Description A flaw was found in the access control of the moodle virtual learning environment. The issue allows teachers in an assignment group to modify group overrides for other groups in the same assignment, potentially impacting the integrity of protected information.

Recommendations For versions prior to 3.7.1, update to version 3.7.1 or later. For versions prior to 3.6.5, update to version 3.6.5 or later. For versions prior to 3.5.7, update to version 3.5.7 or later.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

ALT-PU-2019-2248

ALT-PU-2019-2566

BDU:2020-02113

CVE-2019-10189

GHSA-H7XP-7FJP-GHHC

Produtos afetados

Alt Linux

Moodle

Referências · 12

• https://github.com/moodle/moodle · Nota
• https://cxsecurity.com/cveshow/CVE-2019-10189 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-10189 · Nota de Segurança
• http://securityfocus.com/bid/109271 · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10189 · Nota
• https://cve.org/CVERecord?id=CVE-2019-10189 · Nota de Segurança
• https://ubuntu.com/security/CVE-2019-10189 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2020-02113 · Nota de Segurança
• https://moodle.org/mod/forum/discuss.php?d=388570 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-h7xp-7fjp-ghhc · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2019-10189 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2019-10189 · Aviso do Fabricante