CVE-2020-25629

A vulnerability was found in Moodle where users with "Log in as" capability in a course context (typically, course managers) may gain access to some site administration capabilities by "logging in as" a System manager. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. This is fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14.

CVSS v3 8.8 HIGH
CVSS v2.0 6.5 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

6.5^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:P/A:P

Exploitability : 8.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
https://moodle.org/mod/forum/discuss.php?d=410841	Patch Vendor Advisory
https://moodle.org/mod/forum/discuss.php?d=410841	Patch Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:moodle:moodle::::::::
	cpe:2.3:a:moodle:moodle::::::::
	cpe:2.3:a:moodle:moodle::::::::
	cpe:2.3:a:moodle:moodle::::::::

History

21 Nov 2024, 05:18

Type	Values Removed	Values Added
References	~~() https://moodle.org/mod/forum/discuss.php?d=410841 - Patch, Vendor Advisory~~	() https://moodle.org/mod/forum/discuss.php?d=410841 - Patch, Vendor Advisory

21 Oct 2022, 18:21

Type	Values Removed	Values Added
CWE	~~CWE-284~~	CWE-862

Information

Published : 2020-12-08 01:15

Updated : 2024-11-21 05:18

NVD link : CVE-2020-25629

Mitre link : CVE-2020-25629

CVE.ORG link : CVE-2020-25629

JSON object : View

Products Affected

moodle

moodle

CWE

CWE-284

Improper Access Control

CWE-862

Missing Authorization

{"id": "CVE-2020-25629", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:P/A:P", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2020-12-08T01:15:11.740", "references": [{"url": "https://moodle.org/mod/forum/discuss.php?d=410841", "tags": ["Patch", "Vendor Advisory"], "source": "secalert@redhat.com"}, {"url": "https://moodle.org/mod/forum/discuss.php?d=410841", "tags": ["Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-284"}]}, {"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in Moodle where users with \"Log in as\" capability in a course context (typically, course managers) may gain access to some site administration capabilities by \"logging in as\" a System manager. This affects 3.9 to 3.9.1, 3.8 to 3.8.4, 3.7 to 3.7.7, 3.5 to 3.5.13 and earlier unsupported versions. This is fixed in 3.9.2, 3.8.5, 3.7.8 and 3.5.14."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en Moodle donde los usuarios con la capacidad \"Log in as\" en el contexto de un curso (t\u00edpicamente, administradores de cursos) pueden obtener acceso a algunas funciones de administraci\u00f3n del sitio mediante un \"logging in as\" un administrador del sistema. Esto afecta a versiones 3.9 hasta 3.9.1, 3.8 hasta 3.8.4, 3.7 hasta 3.7.7, 3.5 hasta 3.5.13 y versiones anteriores no compatibles. Esto se corrige en las versiones 3.9.2, 3.8.5, 3.7.8 y 3.5.14"}], "lastModified": "2024-11-21T05:18:16.923", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EEEA3C5E-95D8-4423-BC7D-25AF97048513", "versionEndExcluding": "3.5.14", "versionStartIncluding": "3.5.0"}, {"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "950E176E-D992-4526-BBC7-2D2352956B1F", "versionEndExcluding": "3.7.8", "versionStartIncluding": "3.7.0"}, {"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CD970C3-DD85-48C8-A95D-69390F61B1E7", "versionEndExcluding": "3.8.5", "versionStartIncluding": "3.8.0"}, {"criteria": "cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7621A65F-A568-45DE-B2B7-A809EB48409F", "versionEndExcluding": "3.9.2", "versionStartIncluding": "3.9.0"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}