CVE-2012-1170

Moodle before 2.2.2 has an external enrolment plugin context check issue where capability checks are not thorough

• CWE-354

• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.htmlThird Party Advisory
• https://access.redhat.com/security/cve/cve-2012-1170Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1170Issue Tracking, Patch, Third Party Advisory
• https://moodle.org/mod/forum/discuss.php?d=198632Patch, Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-1170Third Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.htmlThird Party Advisory
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.htmlThird Party Advisory
• https://access.redhat.com/security/cve/cve-2012-1170Broken Link
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1170Issue Tracking, Patch, Third Party Advisory
• https://moodle.org/mod/forum/discuss.php?d=198632Patch, Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2012-1170Third Party Advisory

Published

Nov 14, 2019

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2012-1164slapd in OpenLDAP before 2.4.30 allows remote attackers to c…
• CVE-2012-1165The mime_param_cmp function in crypto/asn1/asn_mime.c in Ope…
• CVE-2012-1166The default keybindings for wwm in LTSP Display Manager (ldm…
• CVE-2012-1167The JBoss Server in JBoss Enterprise Application Platform 5.…
• CVE-2012-1168Moodle before 2.2.2 has a password and web services issue wh…8.2
• CVE-2012-1169Moodle before 2.2.2 has Personal information disclosure, whe…5.3
• CVE-2012-1171The libxml RSHUTDOWN function in PHP 5.x allows remote attac…
• CVE-2012-1172The file-upload implementation in rfc1867.c in PHP before 5.…
• CVE-2012-1173Multiple integer overflows in tiff_getimage.c in LibTIFF 3.9…
• CVE-2012-1174The rm_rf_children function in util.c in the systemd-logind …
• CVE-2012-1175Integer overflow in the GnashImage::size method in libbase/G…
• CVE-2012-1176Buffer overflow in the fribidi_utf8_to_unicode function in P…