ID CVE-2020-14321
Summary In Moodle before 3.9.1, 3.8.4, 3.7.7 and 3.5.13, teachers of a course were able to assign themselves the manager role within that course.
References
Vulnerable Configurations
  • cpe:2.3:a:moodle:moodle:3.8.0:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.8.0:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.8.1:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.8.1:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.8.2:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.8.2:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.8.3:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.8.3:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.7.0:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.7.0:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.7.1:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.7.1:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.7.2:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.7.2:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.7.3:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.7.3:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.7.4:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.7.4:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.7.5:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.7.5:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.7.6:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.7.6:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.0:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.0:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.0:-:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.0:-:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.0:beta:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.0:beta:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.1:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.1:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.2:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.2:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.3:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.3:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.4:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.4:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.5:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.5:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.6:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.6:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.7:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.7:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.8:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.8:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.9:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.9:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.10:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.10:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.11:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.11:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.5.12:*:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.5.12:*:*:*:*:*:*:*
  • cpe:2.3:a:moodle:moodle:3.9.0:-:*:*:*:*:*:*
    cpe:2.3:a:moodle:moodle:3.9.0:-:*:*:*:*:*:*
CVSS
Base: None
Impact:
Exploitability:
CWE CWE-863
CAPEC
Access
VectorComplexityAuthentication
Impact
ConfidentialityIntegrityAvailability
Last major update 08-12-2022 - 03:19
Published 16-08-2022 - 21:15
Last modified 08-12-2022 - 03:19
Back to Top