VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 23, 2012· Updated Jun 16, 2026

CVE-2012-3388

CVE-2012-3388

Description

The is_enrolled function in lib/accesslib.php in Moodle 2.2.x before 2.2.4 and 2.3.x before 2.3.1 does not properly interact with the caching feature, which might allow remote authenticated users to bypass an intended capability check via unspecified vectors that trigger caching of a user record.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6
  • Moodle/Moodle6 versions
    cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:moodle:moodle:2.2.0:*:*:*:*:*:*:*
    • cpe:2.3:a:moodle:moodle:2.2.1:*:*:*:*:*:*:*
    • cpe:2.3:a:moodle:moodle:2.2.2:*:*:*:*:*:*:*
    • cpe:2.3:a:moodle:moodle:2.2.3:*:*:*:*:*:*:*
    • cpe:2.3:a:moodle:moodle:2.3.0:*:*:*:*:*:*:*
    • (no CPE)range: <2.2.4, <2.3.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.