Home > Vulnerability Database > CVE-2016-3733

Mend Vulnerability Database

New vulnerability? Tell us about it!

CVE-2016-3733

Good to know:

Date: April 20, 2017

The "restore teacher" feature in Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, 2.8 through 2.8.11, 2.7 through 2.7.13, and earlier allows remote authenticated users to overwrite the course idnumber.

Language: PHP

Severity Score

4.3

Related Resources (5)

Url: http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-51369

Url: http://www.securitytracker.com/id/1035902

Url: http://www.openwall.com/lists/oss-security/2016/05/17/4

Url: https://nvd.nist.gov/vuln/detail/CVE-2016-3733

Url: https://www.mend.io/vulnerability-database/CVE-2016-3733

Severity Score

4.3

Weakness Type (CWE)

Improper Access Control

CWE-284

Top Fix

Upgrade Version

CVSS v3

Base Score:	4.3
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	LOW
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	LOW
Availability (A):	NONE

CVSS v2

Base Score:	4.0
Access Vector (AV):	NETWORK
Access Complexity (AC):	LOW
Authentication (AU):	SINGLE
Confidentiality (C):	NONE
Integrity (I):	PARTIAL
Availability (A):	NONE
Additional information:

Do you need more information?

Contact Us