Mend.io Vulnerability Database

What is a CVE vulnerability ID? icon What is a WS vulnerability ID? icon What is an MSC vulnerability ID? icon
New vulnerability? Tell us about it!
icon

We found results for “”

CVE-2015-5342

Date: February 21, 2016

The choice module in Moodle through 2.6.11, 2.7.x before 2.7.11, 2.8.x before 2.8.9, and 2.9.x before 2.9.3 allows remote authenticated users to bypass intended access restrictions by visiting a URL to add or delete responses in the closed state.

Language: PHP

Severity Score

Related Resources (13)

http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51569
https://github.com/moodle/moodle/commit/5c16db4fc561c97b6a907398ea081cdaf6590214
https://github.com/moodle/moodle/commit/02d8c8ca394ba053905f9b87c155042aabf0ce1b
https://github.com/moodle/moodle/commit/fb2491effb1a7d5d7abb0efba5b3929342990514
https://github.com/moodle/moodle/commit/97394274ee29f0a6eecab330b5bbb8ee335e7ece
https://nvd.nist.gov/vuln/detail/CVE-2015-5342
https://github.com/moodle/moodle/commit/7ca8c34045eb0d2031652b452492fe4abb2c7c8a
https://github.com/moodle/moodle/commit/bdaa571437c6357f322871b068f02a4520b7a23d
https://github.com/moodle/moodle/commit/6283c33979001b035f9fc565b869296f66a61c4e
https://github.com/moodle/moodle/commit/09bb6f19e5814deb25ae6ceb8270063430b8941f
https://github.com/moodle/moodle
https://moodle.org/mod/forum/discuss.php?d=323237
https://www.mend.io/vulnerability-database/CVE-2015-5342

Severity Score

Weakness Type (CWE)

Permissions, Privileges, and Access Control

CWE-264

CVSS v3.1

Base Score:
Attack Vector (AV): NETWORK
Attack Complexity (AC): LOW
Privileges Required (PR): LOW
User Interaction (UI): NONE
Scope (S): UNCHANGED
Confidentiality (C): NONE
Integrity (I): LOW
Availability (A): NONE

CVSS v2

Base Score:
Access Vector (AV): NETWORK
Access Complexity (AC): LOW
Authentication (AU): SINGLE
Confidentiality (C): NONE
Integrity (I): PARTIAL
Availability (A): NONE
Additional information:

Do you need more information?

Contact Us