Lucene search
Veracode Vulnerability DatabaseVERACODE:4324HistoryMay 30, 2017 - 6:04 a.m.
Information Disclosure
2017-05-3006:04:56
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
7
EPSS
0.001
Percentile
50.2%
Moodle is vulnerable to information disclosure. This is because global search does not respect the Force login for profiles setting and displays user names to unauthenticated users.
Related
prion
prion
Code injection
2017-03-26 18:59:00
cvelist
cvelist
CVE-2017-2643
2017-03-26 18:00:00
nvd
nvd
CVE-2017-2643
2017-03-26 18:59:00
osv
osv
Moodle Global search displays user names for unauthenticated users
2022-05-17 02:30:18
CVE-2017-2643
2017-03-26 18:59:00
openvas
openvas
Moodle 3.2.x < 3.2.2 Information Disclosure Vulnerability - Windows
2018-05-09 00:00:00
Moodle 3.2.x < 3.2.2 Information Disclosure Vulnerability - Linux
2018-05-09 00:00:00
Fedora Update for moodle FEDORA-2017-0fcaf52f1a
2017-04-01 00:00:00
cve
cve
CVE-2017-2643
2017-03-26 18:59:00
github
github
Moodle Global search displays user names for unauthenticated users
2022-05-17 02:30:18
ubuntucve
ubuntucve
CVE-2017-2643
2017-03-26 00:00:00
fedora
fedora
[SECURITY] Fedora 25 Update: moodle-3.1.5-1.fc25
2017-04-01 00:26:58
[SECURITY] Fedora 26 Update: moodle-3.2.2-1.fc26
2017-04-01 17:56:20
[SECURITY] Fedora 24 Update: moodle-3.1.5-1.fc24
2017-03-31 23:48:47