CVE-2012-0797

Severity

55%

Complexity

80%

Confidentiality

81%

The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token.

The webservices functionality in Moodle 2.0.x before 2.0.7, 2.1.x before 2.1.4, and 2.2.x before 2.2.1 allows remote authenticated users to bypass the deleted status and continue using a server via a token.

CVSS 2.0 Base Score 5.5. CVSS Attack Vector: network. CVSS Attack Complexity: low. CVSS Vector: (AV:N/AC:L/Au:S/C:P/I:P/A:N).

Overview

First reported 12 years ago

2012-07-17 10:20:00

Last updated 5 years ago

2020-01-10 20:04:00

Affected Software

Moodle

Moodle 2.2

2.2

References

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-28126

Vendor Advisory

http://moodle.org/mod/forum/discuss.php?d=194016

Vendor Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=783532

Issue Tracking

Stay updated

ExploitPedia is constantly evolving. Sign up to receive a notification when we release additional functionality.

Get in touch

If you'd like to report a bug or have any suggestions for improvements then please do get in touch with us using this form. We will get back to you as soon as we can.