Lucene search
RedhatCVELIST:CVE-2016-0724HistoryFeb 22, 2016 - 2:00 a.m.
CVE-2016-0724
2016-02-2202:00:00
redhat
www.cve.org
5
The (1) core_enrol_get_course_enrolment_methods and (2) enrol_self_get_instance_info web services in Moodle through 2.6.11, 2.7.x before 2.7.12, 2.8.x before 2.8.10, 2.9.x before 2.9.4, and 3.0.x before 3.0.2 do not consider the moodle/course:viewhiddencourses capability, which allows remote authenticated users to obtain sensitive information via a web-service request.
References
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52072
lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html
lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html
www.openwall.com/lists/oss-security/2016/01/18/1
www.securitytracker.com/id/1034694
moodle.org/mod/forum/discuss.php?d=326205
Related
osv
osv
Moodle sensitive information disclosure
2022-05-13 01:12:38
ubuntucve
ubuntucve
CVE-2016-0724
2016-02-22 00:00:00
veracode
veracode
Information Disclosure
2017-07-26 23:08:24
prion
prion
Cross site request forgery (csrf)
2016-02-22 05:59:00
cve
cve
CVE-2016-0724
2016-02-22 05:59:21
github
github
Moodle sensitive information disclosure
2022-05-13 01:12:38
nvd
nvd
CVE-2016-0724
2016-02-22 05:59:21
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0029)
2016-01-21 00:00:00
Fedora Update for moodle FEDORA-2016-1
2016-02-05 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: moodle-2.8.10-1.fc22
2016-02-01 06:35:55
[SECURITY] Fedora 23 Update: moodle-2.9.4-1.fc23
2016-01-30 18:28:59
nessus
nessus
Fedora 23 : moodle-2.9.4-1.fc23 (2016-1c10ab3c35)
2016-03-04 00:00:00
Fedora 22 : moodle-2.8.10-1.fc22 (2016-fb2597f4eb)
2016-03-04 00:00:00
freebsd
freebsd
moodle -- multiple vulnerabilities
2016-01-18 00:00:00
mageia
mageia
Updated moodle packages fix security vulnerability
2016-01-20 20:53:26