MSA-12-0037: Write access issue in Database activity module

MSA-12-0037: Write access issue in Database activity module

by Michael de Raadt -
Number of replies: 0
Topic: It's possible for any user to overwrite site wide database presets
Severity/Risk: Minor
Versions affected: 2.2 to 2.2.2+, 2.1 to 2.1.5+
Reported by: Dan Poltawski
Issue no.: MDL-31763

CVE Identifier:

CVE-2012-2366
Changes (master): http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-31763

Description:

Users were able to overwrite site-wide Database activity presets created by other users.