user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not
properly check a role, which allows remote authenticated users to obtain
the full names of other users via the course profile page.
Author | Note |
---|---|
kees | MSA-10-0003 http://tracker.moodle.org/browse/MDL-21830 |