Lucene search
Veracode Vulnerability DatabaseVERACODE:4718HistoryJul 26, 2017 - 11:08 p.m.
Information Disclosure
2017-07-2623:08:24
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
11
EPSS
0.002
Percentile
59.0%
Moodle is vulnerable to information disclosure. The library functions core_enrol_get_course_enrolment_methods and enrol_self_get_instance_info don’t check course visibility permissions, allowing a malicious user to access hidden courses.
References
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52072
lists.fedoraproject.org/pipermail/package-announce/2016-February/176502.html
lists.fedoraproject.org/pipermail/package-announce/2016-January/176436.html
www.openwall.com/lists/oss-security/2016/01/18/1
www.securitytracker.com/id/1034694
git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-52072
moodle.org/mod/forum/discuss.php?d=326205
Related
github
github
Moodle sensitive information disclosure
2022-05-13 01:12:38
nvd
nvd
CVE-2016-0724
2016-02-22 05:59:21
osv
osv
Moodle sensitive information disclosure
2022-05-13 01:12:38
ubuntucve
ubuntucve
CVE-2016-0724
2016-02-22 00:00:00
prion
prion
Cross site request forgery (csrf)
2016-02-22 05:59:00
cve
cve
CVE-2016-0724
2016-02-22 05:59:21
cvelist
cvelist
CVE-2016-0724
2016-02-22 02:00:00
openvas
openvas
Mageia: Security Advisory (MGASA-2016-0029)
2016-01-21 00:00:00
Fedora Update for moodle FEDORA-2016-1
2016-02-05 00:00:00
nessus
nessus
Fedora 23 : moodle-2.9.4-1.fc23 (2016-1c10ab3c35)
2016-03-04 00:00:00
Fedora 22 : moodle-2.8.10-1.fc22 (2016-fb2597f4eb)
2016-03-04 00:00:00
freebsd
freebsd
moodle -- multiple vulnerabilities
2016-01-18 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: moodle-2.8.10-1.fc22
2016-02-01 06:35:55
[SECURITY] Fedora 23 Update: moodle-2.9.4-1.fc23
2016-01-30 18:28:59
mageia
mageia
Updated moodle packages fix security vulnerability
2016-01-20 20:53:26