Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to
References
Link | Resource |
---|---|
https://security-tracker.debian.org/tracker/CVE-2012-1155 | Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html | Mailing List Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html | Mailing List Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html | Mailing List Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html | Mailing List Third Party Advisory |
http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html | Mailing List Third Party Advisory |
https://moodle.org/mod/forum/discuss.php?d=198621 | Patch Vendor Advisory |
https://access.redhat.com/security/cve/cve-2012-1155 | Broken Link |
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1155 | Issue Tracking Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
Configuration 4 (hide)
|
Information
Published : 2019-11-14 08:15
Updated : 2019-11-22 10:44
NVD link : CVE-2012-1155
Mitre link : CVE-2012-1155
JSON object : View
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor
Products Affected
redhat
- enterprise_linux
debian
- debian_linux
moodle
- moodle
fedoraproject
- fedora