Lucene search

K
cveRedhatCVE-2016-3731
HistoryApr 20, 2017 - 9:59 p.m.

CVE-2016-3731

2017-04-2021:59:00
CWE-200
redhat
web.nvd.nist.gov
28
cve-2016-3731
moodle
remote attackers
hidden forums
forum discussions
nvd

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

55.3%

Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions.

Affected configurations

Nvd
Node
moodlemoodleMatch2.8.0
OR
moodlemoodleMatch2.8.1
OR
moodlemoodleMatch2.8.2
OR
moodlemoodleMatch2.8.3
OR
moodlemoodleMatch2.8.4
OR
moodlemoodleMatch2.8.5
OR
moodlemoodleMatch2.8.6
OR
moodlemoodleMatch2.8.7
OR
moodlemoodleMatch2.8.8
OR
moodlemoodleMatch2.8.9
OR
moodlemoodleMatch2.8.10
OR
moodlemoodleMatch2.8.11
OR
moodlemoodleMatch2.9.0
OR
moodlemoodleMatch2.9.1
OR
moodlemoodleMatch2.9.2
OR
moodlemoodleMatch2.9.3
OR
moodlemoodleMatch2.9.4
OR
moodlemoodleMatch2.9.5
OR
moodlemoodleMatch3.0.0
OR
moodlemoodleMatch3.0.0beta
OR
moodlemoodleMatch3.0.0rc1
OR
moodlemoodleMatch3.0.0rc2
OR
moodlemoodleMatch3.0.0rc3
OR
moodlemoodleMatch3.0.0rc4
OR
moodlemoodleMatch3.0.1
OR
moodlemoodleMatch3.0.2
OR
moodlemoodleMatch3.0.3
VendorProductVersionCPE
moodlemoodle2.8.0cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*
moodlemoodle2.8.1cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*
moodlemoodle2.8.2cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*
moodlemoodle2.8.3cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*
moodlemoodle2.8.4cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*
moodlemoodle2.8.5cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*
moodlemoodle2.8.6cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*
moodlemoodle2.8.7cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*
moodlemoodle2.8.8cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*
moodlemoodle2.8.9cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*
Rows per page:
1-10 of 271

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

CVSS3

5.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AI Score

6.5

Confidence

High

EPSS

0.002

Percentile

55.3%