CVE-2012-3388

The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which…

published July 23, 2012

CVSS
—
EPSS
1%
Percentile
65.9
In the wild
Unconfirmed
What it is

The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01128 · 65.9th percentile
Published
2012-07-23T21:00Z
EPSS history
Timeline
  • 23 JUL 21:00Z
    The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which…
    cvelistv5