6 matches found
Linux Distros Unpatched Vulnerability : CVE-2013-1830
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforprofiles setting, which...
Fedora Update for moodle FEDORA-2013-4387
Check for the Version of moodle OpenVAS Vulnerability Test Fedora Update for moodle FEDORA-2013-4387 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...
Fedora 18 : moodle-2.3.6-1.fc18 (2013-4387)
Fix for CVEs: CVE-2012-3363 CVE-2013-1830 CVE-2013-1831 CVE-2013-1832 CVE-2013-1833 CVE-2013-1834 CVE-2013-1835 CVE-2013-1836 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...
Fedora 17 : moodle-2.2.9-1.fc17 (2013-4404)
Fix for CVEs: CVE-2012-3363 CVE-2013-1830 CVE-2013-1831 CVE-2013-1832 CVE-2013-1833 CVE-2013-1834 CVE-2013-1835 CVE-2013-1836 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean a...
CVE-2013-1830
user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote attackers to obtain sensitive course-profile information by leveraging the guest role, as demonstrated by a Google search...
CVE-2013-1830
The CVE-2013-1830 entry refers to Moodle versions affected by a privilege/information disclosure flaw: user/view.php does not enforce the forceloginforprofiles setting, allowing remote attackers to obtain sensitive course-profile information via the guest role. Affected versions are Moodle up to ...