Auth bypass in Moodle
CVE-2020-25701
If the upload course tool in Moodle was used to delete an enrollment method which did not exist or was not already enabled, the tool would erroneously enable that enrollment method. This could lead to unintended users gaining access to the course. Versions affected: 3.9 to 3.9.2, 3.8 to 3.8.5, 3.7 to 3.7.8, 3.5 to 3.5.14 and earlier unsupported versions. This is fixed in moodle 3.9.3, 3.8.6, 3.7.9, 3.5.15, and 3.10.
EPSS: 0.014 (69.1th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N.
Affected products
- Moodle
- Fedoraproject Fedora — versions 32, 33
- N/a Moodle — versions Fixed in 3.9.3, Fixed in 3.8.6, Fixed in 3.7.9
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secalert@redhat.com (x_refsource_MISC, Issue Tracking, Vendor Advisory)
- secalert@redhat.com (x_refsource_MISC, Vendor Advisory)
- secalert@redhat.com (x_refsource_FEDORA, vendor-advisory)
- secalert@redhat.com (x_refsource_FEDORA, vendor-advisory)
Frequently asked questions
- What is CVE-2020-25701?
- CVE-2020-25701 is a medium-severity vulnerability in Moodle, classified under Improper Access Control. CVSS score: 5.3/10. Published 2020-11-19.
- How severe is CVE-2020-25701?
- Medium severity. CVSS v3 base score is 5.3 out of 10.
- Is CVE-2020-25701 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.