CVE-2022-0984CWE-863

Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria…

published April 29, 2022

CVSS
—
EPSS
1%
Percentile
45.7
In the wild
Unconfirmed
What it is

Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria, which should only be available for site badges.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00557 · 45.7th percentile
Weakness
CWE-863 · Incorrect Authorization
Published
2022-04-29T16:05Z
EPSS history
Timeline
  • 29 APR 16:05Z
    Users with the capability to configure badge criteria (teachers and managers by default) were able to configure course badges with profile field criteria…
    cvelistv5