Lucene search
PRIOn knowledge basePRION:CVE-2014-0008HistoryJan 20, 2014 - 3:14 p.m.
Design/Logic Flaw
2014-01-2015:14:00
PRIOn knowledge base
www.prio-n.com
1
lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitive information by reading the Config Changes Report.
References
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36721
openwall.com/lists/oss-security/2014/01/20/1
www.securitytracker.com/id/1029647
lists.fedoraproject.org/pipermail/package-announce/2014-January/127510.html
lists.fedoraproject.org/pipermail/package-announce/2014-January/127533.html
moodle.org/mod/forum/discuss.php?d=252414
Related
cve
cve
CVE-2014-0008
2014-01-20 15:14:25
ubuntucve
ubuntucve
CVE-2014-0008
2014-01-20 00:00:00
veracode
veracode
Information Disclosure
2017-07-03 08:29:45
nvd
nvd
CVE-2014-0008
2014-01-20 15:14:25
cvelist
cvelist
CVE-2014-0008
2014-01-20 11:00:00
mageia
mageia
Updated moodle package fixes security vulnerabilities
2014-02-12 02:34:37
nessus
nessus
Fedora 20 : moodle-2.5.4-1.fc20 (2014-1396)
2014-01-31 00:00:00
Fedora 19 : moodle-2.4.8-1.fc19 (2014-1377)
2014-01-31 00:00:00
fedora
fedora
[SECURITY] Fedora 20 Update: moodle-2.5.4-1.fc20
2014-01-31 04:27:57
[SECURITY] Fedora 19 Update: moodle-2.4.8-1.fc19
2014-01-31 04:24:00
[SECURITY] Fedora 20 Update: moodle-2.5.5-1.fc20
2014-03-30 06:16:54
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0053)
2022-01-28 00:00:00
Fedora Update for moodle FEDORA-2014-1377
2014-02-03 00:00:00
Fedora Update for moodle FEDORA-2014-1377
2014-02-03 00:00:00