Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2015-5268 - Vulnerability Database

Moodle Permissions Privileges and Access Controls Vulnerability - CVE-2015-5268

Medium

Reference: CVE-2015-5268

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2015-5268

Title: Moodle Permissions Privileges and Access Controls Vulnerability

Overview:

The rating component in Moodle through 2.6.11 2.7.x before 2.7.10 2.8.x before 2.8.8 and 2.9.x before 2.9.2 mishandles group-based authorization checks which allows remote authenticated users to obtain sensitive information by reading a rating value.