CVE-2016-8643 In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services

Description

In Moodle 2.x and 3.x, non-admin site managers may accidentally edit admins via web services.

Affected products and versions

Product	Affected versions	Fixed in
Moodle 2.x and 3.x	Versions not published

Other CVEs of Moodle 2.x and 3.x

The 9 CVEs of Moodle 2.x and 3.x →

CVE-2017-7489 In Moodle 2.x and 3.x, remote authenticated users can take ownership of arbitrary blogs by editing an external blog link Not rated CVE-2017-7490 In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing Not rated CVE-2017-7491 In Moodle 2.x and 3.x, a CSRF attack is possible that allows attackers to change the "number of courses displayed in the… Not rated CVE-2017-2641 In Moodle 2.x and 3.x, SQL injection can occur via user preferences Not rated