mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-ukUpgrade moodle-gaUpgrade moodle-csUpgrade moodle-ltUpgrade moodle-ptUpgrade moodle-viUpgrade moodle-msUpgrade moodle-bsUpgrade moodle-srUpgrade moodle-fiUpgrade moodle-huUpgrade moodle-lvUpgrade moodle-nnUpgrade moodle-thUpgrade moodle-elUpgrade moodle-ruUpgrade moodle-faUpgrade moodle-plUpgrade moodle-caUpgrade moodle-roUpgrade moodle-jaUpgrade moodle-beUpgrade moodle-soUpgrade moodle-hrUpgrade moodle-svUpgrade moodle-euUpgrade moodle-arUpgrade moodle-bgUpgrade moodle-knUpgrade moodleUpgrade moodle-etUpgrade moodle-heUpgrade moodle-itUpgrade moodle-nlUpgrade moodle-zh_cnUpgrade moodle-idUpgrade moodle-afUpgrade moodle-glUpgrade moodle-kaUpgrade moodle-isUpgrade moodle-deUpgrade moodle-koUpgrade moodle-daUpgrade moodle-skUpgrade moodle-de_duUpgrade moodle-slUpgrade moodle-esUpgrade moodle-sqUpgrade moodle-frUpgrade moodle-trUpgrade moodle-mi_tnUpgrade moodle-noUpgrade moodle-kmUpgrade moodle-tlUpgrade moodle-hi | Feb 17, 2015 | Dec 15, 2009 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub