Information Disclosure

Moodle is vulnerable to information disclosure. The attacks exist because the checking of whose badges are being viewed is not done in the correct context, allowing an authenticated user to discern the other users' badges without their permissions...