Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2014-7832 - Vulnerability Database
Moodle

Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2014-7832

Medium
Reference: CVE-2014-7832
NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2014-7832
Title: Moodle Permissions Privileges and Access Controls Vulnerability
Overview:

mod/lti/launch.php in the LTI module in Moodle through 2.4.11 2.5.x before 2.5.9 2.6.x before 2.6.6 and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level which allows remote authenticated users to bypass the mod/lti:view capability requirement by viewing an activity instance.