---
title: "CVE-2012-5480\n    | Ubuntu"
description: Ubuntu is an open source software operating system that runs from the
  desktop, to the cloud, to all your internet connected things.
url: https://ubuntu.com/security/CVE-2012-5480?format=md
keywords: index, follow
---

# CVE-2012-5480

Publication date 21 November 2012

Last updated 24 July 2024

---

Ubuntu priority

**Low**

[Why this priority?](https://ubuntu.com/security/cves/about#priority )

Toggle side navigation

## Description

The Database activity module in Moodle 2.1.x before 2.1.9, 2.2.x before
2.2.6, and 2.3.x before 2.3.3 allows remote attackers to bypass intended
restrictions on reading other participants' entries via an advanced search.

## Status

Show unmaintained releases

| Package | Ubuntu Release | Status |
| --- | --- | --- |
| moodle | 14.04 LTS trusty | Not in release |
| 13.10 saucy | Not affected |
| 13.04 raring | Not affected |
| 12.10 quantal | Ignored end of life |
| 12.04 LTS precise | Not affected |
| 11.10 oneiric | Not affected |
| 10.04 LTS lucid | Not affected |
| 8.04 LTS hardy | Ignored end of life |

---

* [How can I get the fixes?](https://ubuntu.com/security/cves/about#security)
* [What do statuses mean?](https://ubuntu.com/security/cves/about#statuses)

## References

* [MITRE](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5480)
* [NVD](https://nvd.nist.gov/vuln/detail/CVE-2012-5480)
* [Launchpad](https://launchpad.net/bugs/cve/CVE-2012-5480)
* [Debian](https://security-tracker.debian.org/tracker/CVE-2012-5480)

### Other references

* <https://moodle.org/mod/forum/discuss.php?d=216160>
* <http://openwall.com/lists/oss-security/2012/11/19/1>
* <http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-35558>
* <https://www.cve.org/CVERecord?id=CVE-2012-5480>
