CVE-2019-14879 MEDIUM

CVE-2019-14879

Vendor [Unknown]
Product moodle
Weakness CWE-264
Published January 7, 2020
Last update August 5, 2024
View on NVD All CVEs

CVSS base score

4.2/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

What the vulnerability does

01Description

A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked (where applicable).

Key dates

02Disclosure timeline

January 7, 2020 CVE published
August 5, 2024 Record updated