CVE-2012-1155

EUVD-2012-1188
Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 79%
Affected Products (NVD)
VendorProductVersion
moodlemoodle
1.9 ≤
𝑥
< 1.9.17
moodlemoodle
2.0 ≤
𝑥
< 2.0.8
moodlemoodle
2.1 ≤
𝑥
< 2.1.5
moodlemoodle
2.2 ≤
𝑥
< 2.2.2
redhatenterprise_linux
6.0
debiandebian_linux
6.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
moodle
hardy
ignored
lucid
ignored
maverick
ignored
natty
ignored
oneiric
ignored
precise
not-affected
quantal
not-affected
raring
not-affected
saucy
not-affected