Description

CVE-2024-48898 is a vulnerability found in Moodle, an open-source learning management system. This vulnerability allows users with the ability to delete audiences from reports to potentially delete audiences from other reports that they do not have permission to delete from. This unauthorized deletion could impact data integrity and system security. While the CVSS score is 6.5, the SOCRadar Vulnerability Risk Score (SVRS) is 42, signifying a moderate risk requiring attention.

Key Insights

• Impact: This vulnerability could potentially lead to data loss and unauthorized modifications of reports, affecting the integrity of information presented within Moodle.
• Exploitability: The vulnerability requires a user with the ability to delete audiences from reports, potentially making it easier for attackers with existing user accounts to exploit.
• Moodle Versions: This vulnerability impacts multiple versions of Moodle. Organizations using Moodle should check their versions and update accordingly.
• CWE: The vulnerability falls under CWE-862, which is a weakness related to inadequate authentication and authorization controls, indicating a potential flaw in the system's access management.

Mitigation Strategies

• Patching: The most effective mitigation strategy is to promptly install the latest security updates released by Moodle.
• Access Control Review: Conduct a thorough review of user permissions and access control configurations within Moodle, ensuring that only authorized users can delete audiences from reports.
• Security Awareness Training: Educate users about the importance of secure practices and how to identify and report suspicious activities.
• Monitoring: Implement robust security monitoring and logging to detect any unauthorized access or attempts to exploit this vulnerability.

Additional Information

For further information or to discuss this incident in more detail, please utilize the "Ask to Analyst" feature within SOCRadar, contact SOCRadar directly, or open a support ticket.