Lucene search

K
ubuntucveUbuntu.comUB:CVE-2013-2080
HistoryMay 25, 2013 - 12:00 a.m.

CVE-2013-2080

2013-05-2500:00:00
ubuntu.com
ubuntu.com
10

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

0.002

Percentile

59.4%

The core_grade component in Moodle through 2.2.10, 2.3.x before 2.3.7, and
2.4.x before 2.4.4 does not properly consider the existence of hidden
grades, which allows remote authenticated users to obtain sensitive
information by leveraging the student role and reading the Gradebook
Overview report.

OSVersionArchitecturePackageVersionFilename
ubuntu18.04noarchmoodle< anyUNKNOWN
ubuntu16.04noarchmoodle< anyUNKNOWN

CVSS2

4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:N/A:N

EPSS

0.002

Percentile

59.4%