CVE-2012-1155

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Nov 14, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-11567.5Moodle before 2.2.2 has users' private files included in course backups CVE-2012-11574.3Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default CVE-2012-11584.3Moodle before 2.2.2 has a course information leak in gradebook where users are able to see hidden grade items in export CVE-2012-11594.3Moodle before 2.2.2: Overview report allows users to see hidden courses CVE-2012-11602.7Moodle before 2.2.2 has a permission issue in Forum Subscriptions where unenrolled users can subscribe/unsubscribe via mod/forum/index.php CVE-2012-11614.3Moodle before 2.2.2: Course information leak via hidden courses being displayed in tag search results CVE-2012-11627.5Heap-based buffer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to cause a denial of service (CVE-2012-11636.8Integer overflow in the _zip_readcdir function in zip_open.c in libzip 0.10 allows remote attackers to execute arbitrary code via the size a CVE-2012-11642.6slapd in OpenLDAP before 2.4.30 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via an LDAP search CVE-2012-11655.0The mime_param_cmp function in crypto/asn1/asn_mime.c in OpenSSL before 0.9.8u and 1.x before 1.0.0h allows remote attackers to cause a deni CVE-2012-116610.0The default keybindings for wwm in LTSP Display Manager (ldm) 2.2.x before 2.2.7 allow remote attackers to execute arbitrary commands via th CVE-2012-11674.6The JBoss Server in JBoss Enterprise Application Platform 5.1.x before 5.1.2 and 5.2.x before 5.2.2, Web Platform before 5.1.2, BRMS Platfor