Information Disclosure

2017-07-0308:29:45

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.002 Low

EPSS

Percentile

61.0%

JSON

Moodle is susceptible to information disclosure. The vulnerability exists because the library records the password in plain text in the config log report, allowing an authenticated administrator to view the passwords when accessing the report.

CPENameOperatorVersion
moodle/moodlele2.4.7
moodle/moodlele2.5.3
moodle/moodlele2.3.11
moodle/moodlele2.6.0

Name	Operator	Version
moodle/moodle	le	2.4.7
moodle/moodle	le	2.5.3
moodle/moodle	le	2.3.11
moodle/moodle	le	2.6.0

References

git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-36721

lists.fedoraproject.org/pipermail/package-announce/2014-January/127510.html

lists.fedoraproject.org/pipermail/package-announce/2014-January/127533.html

openwall.com/lists/oss-security/2014/01/20/1

www.securitytracker.com/id/1029647

git.moodle.org/gw?p=moodle.git;a=commit;h=914499a340dcdeffc9336eb5fa080d5dc51e6bac

github.com/moodle/moodle/commit/914499a340dcdeffc9336eb5fa080d5dc51e6bac

moodle.org/mod/forum/discuss.php?d=252414

0.002 Low

EPSS

Percentile

61.0%

JSON

Related for VERACODE:4511