Moodle CVE-2013-2242 Security Bypass Vulnerability

Bugtraq ID:	61178
Class:	Access Validation Error
CVE:	CVE-2013-2242
Remote:	Yes
Local:	No
Published:	Jul 15 2013 12:00AM
Updated:	Apr 13 2015 10:14PM
Credit:	Francois Gauthier
Vulnerable:	Moodle Moodle 2.2.3 Moodle Moodle 2.2.2 Moodle Moodle 2.2.1
Not Vulnerable:

Moodle CVE-2013-2242 Security Bypass Vulnerability

Moodle is prone to a security-bypass vulnerability.

An attacker may exploit this issue to bypass certain security restrictions and perform unauthorized actions.

The following versions are vulnerable:

Moodle 2.5
Moodle 2.4 through 2.4.4
Moodle 2.3 through 2.3.7
Moodle 2.2 through 2.2.10

Moodle CVE-2013-2242 Security Bypass Vulnerability

An attacker can exploit this issue using a web browser.

Moodle CVE-2013-2242 Security Bypass Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Moodle CVE-2013-2242 Security Bypass Vulnerability

References:

• Moodle Homepage (Moodle)
  
• MSA-13-0027: Access issue in Chat module (Michael de Raadt)