user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page.
CVSS Details
- CVSS 3.1 Base Score: 4.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Apr 29, 2010 |
| Suse | — | Upgrade moodle-esUpgrade moodle-srUpgrade moodle-afUpgrade moodle-hrUpgrade moodle-etUpgrade moodle-kmUpgrade moodle-caUpgrade moodle-soUpgrade moodle-arUpgrade moodle-plUpgrade moodle-isUpgrade moodle-ruUpgrade moodle-bgUpgrade moodle-lvUpgrade moodle-fiUpgrade moodle-msUpgrade moodle-beUpgrade moodle-kaUpgrade moodle-thUpgrade moodle-csUpgrade moodle-gaUpgrade moodle-skUpgrade moodle-frUpgrade moodle-sqUpgrade moodleUpgrade moodle-ptUpgrade moodle-ukUpgrade moodle-jaUpgrade moodle-koUpgrade moodle-idUpgrade moodle-mi_tnUpgrade moodle-zh_cnUpgrade moodle-viUpgrade moodle-svUpgrade moodle-deUpgrade moodle-slUpgrade moodle-glUpgrade moodle-bsUpgrade moodle-huUpgrade moodle-itUpgrade moodle-euUpgrade moodle-elUpgrade moodle-nlUpgrade moodle-ltUpgrade moodle-faUpgrade moodle-hiUpgrade moodle-nnUpgrade moodle-knUpgrade moodle-noUpgrade moodle-tlUpgrade moodle-de_duUpgrade moodle-trUpgrade moodle-heUpgrade moodle-roUpgrade moodle-da | Feb 17, 2015 | Apr 29, 2010 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub