CVE-2020-23128

Name of the Vulnerable Software and Affected Versions Chamilo LMS version 1.11.10

Description The issue is related to improper privilege management. A user with Sessions administrator privilege can create a new user and then use the edit user function to change this new user to administrator privilege.

Recommendations For Chamilo LMS version 1.11.10, consider restricting the use of the edit user function to prevent users from escalating their privileges until a proper fix is available. As a temporary workaround, monitor user account changes closely to detect and mitigate any potential misuse of privileges. At the moment, there is no information about a newer version that contains a fix for this vulnerability.