high7.5
CVE-2012-1170
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough
Impact
Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Moodle | Moodle | before 2.2.2 |
| Fedoraproject | Fedora | Versions 15, 16, 17 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html
- https://access.redhat.com/security/cve/cve-2012-1170
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1170
- https://moodle.org/mod/forum/discuss.php?d=198632
- https://security-tracker.debian.org/tracker/CVE-2012-1170
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html
- http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html
- https://access.redhat.com/security/cve/cve-2012-1170
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1170
- https://moodle.org/mod/forum/discuss.php?d=198632
- https://security-tracker.debian.org/tracker/CVE-2012-1170