PT-2019-6745 · Moodle · Moodle

John Fitchett · Publicado 2019-11-14 · Atualizado 2019-11-18 · CVE-2012-1169

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.2.2

Description The issue concerns the disclosure of personal information. When the administrative setting for users' name display is set to show only the first name, full names are still displayed in page breadcrumbs.

Recommendations For versions prior to 2.2.2, update to version 2.2.2 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2012-1169

Produtos afetados

Moodle

Referências · 11

• https://access.redhat.com/security/cve/cve-2012-1169 · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078210.html · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html · Nota
• https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-1169 · Correção
• https://moodle.org/mod/forum/discuss.php?d=198625 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/081047.html · Nota
• http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2012-1169 · Nota de Segurança
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1169 · Nota
• https://security-tracker.debian.org/tracker/CVE-2012-1169 · Aviso do Fabricante
• http://lists.fedoraproject.org/pipermail/package-announce/2012-May/080712.html · Nota