| Description: | Users without the appropriate capability were able to set a custom outcome they had created as a standard site-wide capability when editing that outcome. |
| Issue summary: |
Teachers can set Outcomes to be Standard when re-editing |
| Severity/Risk: | Minor |
| Versions affected: | 2.4, 2.3 to 2.3.3+, 2.2 to 2.2.6+, 2.1 to 2.1.9+ 1.9 to 1.9.19 |
| Reported by: | Elena Ivanov |
| Issue no.: | MDL-27619 |
|
CVE identifier: |
CVE-2012-6098 |
| Changes (master): | http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-27619 |