Lucene search
RedhatCVELIST:CVE-2014-7832HistoryNov 24, 2014 - 11:00 a.m.
CVE-2014-7832
2014-11-2411:00:00
redhat
www.cve.org
5
mod/lti/launch.php in the LTI module in Moodle through 2.4.11, 2.5.x before 2.5.9, 2.6.x before 2.6.6, and 2.7.x before 2.7.3 performs access control at the course level rather than at the activity level, which allows remote authenticated users to bypass the mod/lti:view capability requirement by viewing an activity instance.
Related
prion
prion
Design/Logic Flaw
2014-11-24 11:59:00
cve
cve
CVE-2014-7832
2014-11-24 11:59:02
veracode
veracode
Capability Bypass
2017-07-29 16:34:21
ubuntucve
ubuntucve
CVE-2014-7832
2014-11-24 00:00:00
osv
osv
Moodle allows attackers to bypass the mod/lti:view capability requirement
2022-05-13 01:12:41
github
github
Moodle allows attackers to bypass the mod/lti:view capability requirement
2022-05-13 01:12:41
nvd
nvd
CVE-2014-7832
2014-11-24 11:59:02
nessus
nessus
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0483)
2022-01-28 00:00:00
mageia
mageia
Updated moodle package fixes security vulnerabilities
2014-11-22 13:54:50