medium4.0
CVE-2010-1616
Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring a course, which allows teachers to create new accounts even if they do not have the moo…
Impact
Moodle 1.8.x and 1.9.x before 1.9.8 can create new roles when restoring a course, which allows teachers to create new accounts even if they do not have the moodle/user:create capability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | Versions 1.8.1, 1.8.2, 1.8.3, 1.8.4, 1.8.5, 1.8.6 |
References
- NVD record
- CVE.org record
- http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
- http://moodle.org/security/
- http://tracker.moodle.org/browse/MDL-16658
- http://www.vupen.com/english/advisories/2010/1107
- http://lists.opensuse.org/opensuse-security-announce/2010-05/msg00001.html
- http://moodle.org/security/
- http://tracker.moodle.org/browse/MDL-16658
- http://www.vupen.com/english/advisories/2010/1107