Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores (1) password hashes and (2) unspecified "secrets" in backup files, which might allow attackers to obtain sensitive information.
CVSS Details
- CVSS 3.1 Base Score: 7.5
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Dec 16, 2009 |
| Suse | — | Upgrade moodle-ukUpgrade moodle-bsUpgrade moodle-kmUpgrade moodle-fiUpgrade moodle-itUpgrade moodle-ptUpgrade moodleUpgrade moodle-nlUpgrade moodle-isUpgrade moodle-kaUpgrade moodle-esUpgrade moodle-arUpgrade moodle-etUpgrade moodle-plUpgrade moodle-hrUpgrade moodle-frUpgrade moodle-tlUpgrade moodle-roUpgrade moodle-afUpgrade moodle-csUpgrade moodle-beUpgrade moodle-ruUpgrade moodle-thUpgrade moodle-viUpgrade moodle-lvUpgrade moodle-sqUpgrade moodle-bgUpgrade moodle-jaUpgrade moodle-hiUpgrade moodle-noUpgrade moodle-gaUpgrade moodle-knUpgrade moodle-deUpgrade moodle-heUpgrade moodle-elUpgrade moodle-idUpgrade moodle-ltUpgrade moodle-zh_cnUpgrade moodle-caUpgrade moodle-skUpgrade moodle-faUpgrade moodle-daUpgrade moodle-srUpgrade moodle-slUpgrade moodle-soUpgrade moodle-nnUpgrade moodle-de_duUpgrade moodle-euUpgrade moodle-svUpgrade moodle-mi_tnUpgrade moodle-trUpgrade moodle-huUpgrade moodle-msUpgrade moodle-koUpgrade moodle-gl | Feb 17, 2015 | Dec 15, 2009 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub