Boletines de Vulnerabilidades

MSA-23-0029: Competency framework tools are not restricted as intended


Información sobre el sistema

   
Software afectado PHP

Descripción

por Michael Hawkins. Insufficient capability checks resulted in competency framework tools being available to users without the relevant capability.Severity/Risk:MinorVersions affected:4.2 to 4.2.1, 4.1 to 4.1.4, 4.0 to 4.0.9, 3.11 to 3.11.15, 3.9 to 3.9.22 and earlier unsupported versionsVersions fixed:4.2.2, 4.1.5, 4.0.10, 3.11.16 and 3.9.23Reported by:Michael HawkinsCVE identifier:CVE-2023-40324Changes

More info:

https://moodle.org/mod/forum/discuss.php?d=449650&parent=1807055

Identificadores estándar

Propiedad Valor
CVE CVE-2023-40324.

Histórico de versiones

Versión Comentario Fecha

Miembros de

Ministerio de Defensa
CNI
CCN
CCN-CERT