Moodle Badges Access Bypass Vulnerability
BID:66337
Info
Moodle Badges Access Bypass Vulnerability
| Bugtraq ID: | 66337 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-0129 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 17 2014 12:00AM |
| Updated: | May 07 2015 05:11PM |
| Credit: | Adrian Lorenc |
| Vulnerable: |
Moodle Moodle 2.6.1 Moodle Moodle 2.5.4 Moodle Moodle 2.5.2 Moodle Moodle 2.5.1 Moodle Moodle 2.6 Moodle Moodle 2.5.3 Moodle Moodle 2.5 |
| Not Vulnerable: |
Moodle Moodle 2.6.2 Moodle Moodle 2.5.5 |
Discussion
Moodle Badges Access Bypass Vulnerability
Moodle is prone to an access-bypass vulnerability that may allow attackers to perform actions without proper authorization.
Attackers can leverage this issue to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.
Moodle versions 2.6 through 2.6.1, 2.5 through 2.5.4, and 2.4 through 2.4.8 are vulnerable.
Moodle is prone to an access-bypass vulnerability that may allow attackers to perform actions without proper authorization.
Attackers can leverage this issue to bypass security restrictions and perform unauthorized actions; this may aid in launching further attacks.
Moodle versions 2.6 through 2.6.1, 2.5 through 2.5.4, and 2.4 through 2.4.8 are vulnerable.
Exploit / POC
Moodle Badges Access Bypass Vulnerability
An attacker can exploit this issue using a web browser.
An attacker can exploit this issue using a web browser.
Solution / Fix
Moodle Badges Access Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Moodle Badges Access Bypass Vulnerability
References:
References:
- Moodle Homepage (Moodle)
- MSA-14-0012: Access issue in Badges (Moodle)