Cohort Role Assignment Vulnerability in Moodle by Moodle
CVE-2019-14879

4.2MEDIUM

Key Information:

Vendor

[unknown]

Status
Moodle
Vendor
CVE Published:
7 January 2020

What is CVE-2019-14879?

A vulnerability exists in Moodle that affects specific versions where removing a cohort role assignment does not revoke associated capabilities. This could potentially lead to unauthorized access or permissions not being properly enforced, highlighting the importance of keeping Moodle updated to avoid security risks.

Affected Version(s)

moodle 3.7.x before 3.7.3

moodle 3.6.x before 3.6.7

moodle 3.5.x before 3.5.9

References

https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14879
x_refsource_CONFIRM

CVSS V3.1

Score:
4.2
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.