user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Moodle | — | Upgrade to the latest version of Moodle | Dec 4, 2018 | Apr 29, 2010 |
| Suse | — | Upgrade moodle-lvUpgrade moodle-caUpgrade moodle-isUpgrade moodle-bgUpgrade moodle-hrUpgrade moodle-kmUpgrade moodle-etUpgrade moodle-msUpgrade moodle-soUpgrade moodle-ukUpgrade moodle-ruUpgrade moodle-frUpgrade moodle-skUpgrade moodle-thUpgrade moodleUpgrade moodle-jaUpgrade moodle-csUpgrade moodle-kaUpgrade moodle-beUpgrade moodle-plUpgrade moodle-ptUpgrade moodle-afUpgrade moodle-esUpgrade moodle-gaUpgrade moodle-srUpgrade moodle-sqUpgrade moodle-fiUpgrade moodle-arUpgrade moodle-huUpgrade moodle-itUpgrade moodle-koUpgrade moodle-slUpgrade moodle-zh_cnUpgrade moodle-hiUpgrade moodle-elUpgrade moodle-mi_tnUpgrade moodle-daUpgrade moodle-tlUpgrade moodle-deUpgrade moodle-svUpgrade moodle-de_duUpgrade moodle-trUpgrade moodle-euUpgrade moodle-roUpgrade moodle-nlUpgrade moodle-heUpgrade moodle-faUpgrade moodle-glUpgrade moodle-nnUpgrade moodle-idUpgrade moodle-knUpgrade moodle-viUpgrade moodle-noUpgrade moodle-ltUpgrade moodle-bs | Feb 17, 2015 | Apr 29, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub