PT-2022-11301 · Alt Linux · Alt Linux

Dhananjay Arunesh · Published 2021-09-13 · Updated 2024-03-06 · CVE-2021-40692

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ALT Linux (affected versions not specified)

Description The issue is related to insufficient capability checks, allowing teachers to download users outside of their courses. This suggests a problem with access control or permissions within the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

ALT-PU-2021-2787

ALT-PU-2021-3335

BIT-MOODLE-2021-40692

CVE-2021-40692

GHSA-WR6Q-XV23-RFQ9

Affected Products

Alt Linux

References · 9

• https://ubuntu.com/security/CVE-2021-40692 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2021-40692 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-40692 · Security Note
• https://osv.dev/vulnerability/BIT-moodle-2021-40692 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-40692 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-wr6q-xv23-rfq9 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-40692 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2043414 · Note