A flaw was found in moodle. External API access to Quiz can override contained insufficient access control.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in moodle. External API access to Quiz can override contained insufficient access     control. (CVE-2024-43430)

Note that Nessus relies on the presence of the package as reported by the vendor.

According to its self-reported version, the Moodle install hosted on the remote host is 4.4.x prior to 4.4.2. It is, therefore, affected by multiples vulnerabilities :

- Matrix user/power level management not always working as expected with suspended users.

- Lack of access control when using external methods for Quiz overrides.

Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - A flaw was found in moodle. External API access to Quiz can override contained insufficient access
    control. (CVE-2024-43430)

ID	Name	Product	Family	Type	Severity
261499	Linux Distros Unpatched Vulnerability : CVE-2024-43430	Nessus	Misc.	Local	medium
114720	Moodle 4.4.x < 4.4.2 Multiples Vulnerabilities	Web App Scanning	Component Vulnerability	Version Based	medium
416489	SCA: security update for moodle/moodle (GHSA-jpf2-9ppp-2c49)	Tenable Cloud Security	SCA Checks	Local	medium
416489	SCA: security update for moodle/moodle (GHSA-jpf2-9ppp-2c49)	Tenable Self-Hosted Container Security	SCA Checks	Local	medium

Detections

Analytics

CVE-2024-43430

medium

Tenable Plugins

medium

medium

medium

medium