PT-2016-1307 · Moodle · Moodle

Juan Leyva · Published 2015-12-05 · Updated 2022-05-13 · CVE-2015-5341

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions 2.6.11 and earlier, 2.7.x through 2.7.10, 2.8.x through 2.8.8, 2.9.x through 2.9.2

Description The issue is related to the mod scorm component in Moodle, which mishandles availability dates. This allows remote authenticated users to bypass intended access restrictions and read SCORM contents. The vulnerability is associated with insufficient access control, enabling a remote attacker to circumvent existing access restrictions and gain access to SCORM content.

Recommendations For versions 2.6.11 and earlier, update to version 2.6.12 or later. For versions 2.7.x through 2.7.10, update to version 2.7.11 or later. For versions 2.8.x through 2.8.8, update to version 2.8.9 or later. For versions 2.9.x through 2.9.2, update to version 2.9.3 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-264

CWE-200

Related Identifiers

BDU:2016-00604

CVE-2015-5341

GHSA-C2R4-F8QV-2V7V

MGASA-2015-0464

Affected Products

Moodle

References · 31

• https://osv.dev/vulnerability/UBUNTU-CVE-2015-5341 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-5341 · Security Note
• https://moodle.org/mod/forum/discuss.php?d=323236 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2015-5341 · Security Note
• https://ubuntu.com/security/CVE-2015-5341 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0464 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-c2r4-f8qv-2v7v · Vendor Advisory
• https://bdu.fstec.ru/vul/2016-00604 · Security Note
• https://advisories.mageia.org/MGASA-2015-0464.html · Security Note
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/03b1f63d40d09c206f641b246110c2371d3068a2 · Note
• https://github.com/moodle/moodle/commit/f1178ebcd9cf1c149892335c52f6ccad066e3e05 · Note
• https://github.com/moodle/moodle/commit/d28eedd5363b4f081f9e66d0c9014d84792a89d7 · Note
• https://github.com/moodle/moodle/commit/3d58fd5841308018b32ca78206c74f27c4d4b9c3 · Note
• https://github.com/moodle/moodle/commit/fe9bd2b8bb73e958067f2bdb227a8d0e7cffbcda · Note