Description

admin/roles/override.php in Moodle 2.0.x before 2.0.9, 2.1.x before 2.1.6, and 2.2.x before 2.2.3 allows remote authenticated users to gain privileges by leveraging the teacher role and modifying their own capabilities, as demonstrated by obtaining the backup:userinfo capability.

Remediation

References

CVE-2012-2359

Related Vulnerabilities

WordPress Plugin YITH WooCommerce Advanced Reviews Security Bypass (1.3.9)

Jboss EAP Deserialization of Untrusted Data Vulnerability (CVE-2016-3690)

Osclass Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2018-14481)

WordPress Plugin Donations Privilege Escalation (1.3)

PostgreSQL Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2016-0773)

Severity

Medium

Classification

CVE-2012-2359 CWE-264

Tags

Missing Update Known Vulnerabilities