CVE-2012-3388 in Moodleinformação

Sumário

de MITRE

The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Reservar

14/06/2012

Divulgação

23/07/2012

Moderação

aceite

Entrada

VDB-61389

CPE

pronto

EPSS

0.01128

KEV

não

Atividades

muito baixo

Sector

Police, Education

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2012-3388
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2012-3388
CVE Detailshttps://www.cvedetails.com/cve/CVE-2012-3388/

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!