Beveiligingsadvies

CVE-2014-3546

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2014-07-29 10:00:00

Laatst bijgewerkt 2024-08-06 10:50:16

Toegewezen door redhat

CVSS-score geen score

Status PUBLISHED

Beschrijving

Moodle through 2.3.11, 2.4.x before 2.4.11, 2.5.x before 2.5.7, 2.6.x before 2.6.4, and 2.7.x before 2.7.1 does not enforce certain capability requirements in (1) notes/index.php and (2) user/edit.php, which allows remote attackers to obtain potentially sensitive username and course information via a modified URL.

← Alle CVE's bekijken Bekijk op cve.org ↗