mnet/lib.php in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7, when MNET services are enabled, does not properly check permissions, which allows remote authenticated servers to execute arbitrary MNET functions.
CVSS Details
- CVSS 3.1 Base Score: 6.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-svUpgrade moodle-ukUpgrade moodle-fiUpgrade moodle-knUpgrade moodle-faUpgrade moodle-viUpgrade moodle-beUpgrade moodle-ptUpgrade moodle-jaUpgrade moodle-thUpgrade moodle-plUpgrade moodle-roUpgrade moodle-srUpgrade moodle-msUpgrade moodle-csUpgrade moodle-bgUpgrade moodle-hrUpgrade moodle-lvUpgrade moodle-gaUpgrade moodle-bsUpgrade moodle-caUpgrade moodle-elUpgrade moodle-nnUpgrade moodle-huUpgrade moodle-ltUpgrade moodle-euUpgrade moodle-arUpgrade moodleUpgrade moodle-ruUpgrade moodle-soUpgrade moodle-koUpgrade moodle-mi_tnUpgrade moodle-afUpgrade moodle-etUpgrade moodle-kaUpgrade moodle-deUpgrade moodle-frUpgrade moodle-tlUpgrade moodle-glUpgrade moodle-esUpgrade moodle-heUpgrade moodle-idUpgrade moodle-noUpgrade moodle-skUpgrade moodle-itUpgrade moodle-nlUpgrade moodle-slUpgrade moodle-zh_cnUpgrade moodle-daUpgrade moodle-kmUpgrade moodle-sqUpgrade moodle-hiUpgrade moodle-de_duUpgrade moodle-trUpgrade moodle-is | Feb 17, 2015 | Dec 15, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub