PT-2016-1296 · Moodle · Moodle

Juan Leyva · Published 2015-09-23 · Updated 2022-05-13 · CVE-2015-5268

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions 2.6.11 and earlier, 2.7.x prior to 2.7.10, 2.8.x prior to 2.8.8, 2.9.x prior to 2.9.2

Description The issue is related to inadequate access control in the rating component of the Moodle learning management system. This allows a remote attacker to obtain sensitive information by reading a rating value due to mishandled group-based authorization checks.

Recommendations For versions 2.6.11 and earlier, update to a version later than 2.6.11. For versions 2.7.x prior to 2.7.10, update to version 2.7.10 or later. For versions 2.8.x prior to 2.8.8, update to version 2.8.8 or later. For versions 2.9.x prior to 2.9.2, update to version 2.9.2 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-264

CWE-200

Related Identifiers

BDU:2016-00593

CVE-2015-5268

GHSA-H34C-PX28-RJGW

MGASA-2015-0381

Affected Products

Moodle

References · 30

• https://osv.dev/vulnerability/UBUNTU-CVE-2015-5268 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2015-0381.html · Security Note
• https://cve.org/CVERecord?id=CVE-2015-5268 · Security Note
• https://moodle.org/mod/forum/discuss.php?d=320292 · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00593 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-5268 · Security Note
• https://ubuntu.com/security/CVE-2015-5268 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0381 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-h34c-px28-rjgw · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/20ff15e22b4f0abebe1ab5fbfd1d681c88765e2a · Note
• https://github.com/moodle/moodle/commit/731c2712e746053b1ca06b50118632305b447e02 · Note
• https://github.com/moodle/moodle/commit/fa57105063129eed83bf09d83348681501ff5b64 · Note
• https://github.com/moodle/moodle/commit/4015226623111438158fa762b7ce61f6cf677665 · Note
• https://moodle.org/mod/forum/discuss.php?d=320289 · Note