PT-2015-1575 · Moodle · Moodle

Federico Kirschbaum · Published 2015-05-18 · Updated 2022-05-13 · CVE-2015-3176

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions prior to 2.6.11 Moodle versions prior to 2.7.8 Moodle versions prior to 2.8.6 Moodle version 2.5.9

Description The issue is related to the account-confirmation feature in the login/confirm.php component, which lacks protection of service data. This allows remote attackers to obtain sensitive full-name information by attempting to self-register. The vulnerability can be exploited by a remote attacker to gain access to user account data during self-registration attempts.

Recommendations For versions prior to 2.6.11, update to version 2.6.11 or later. For versions prior to 2.7.8, update to version 2.7.8 or later. For versions prior to 2.8.6, update to version 2.8.6 or later. For version 2.5.9, update to a later version, as 2.5.9 is affected and no direct upgrade path to a fixed version is specified within the provided information.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

BDU:2015-10889

CVE-2015-3176

GHSA-FQRG-VMVJ-JV3X

MGASA-2015-0229

Affected Products

Moodle

References · 30

• https://cve.org/CVERecord?id=CVE-2015-3176 · Security Note
• https://moodle.org/mod/forum/discuss.php?d=313683 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-3176 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-3176 · Security Note
• https://advisories.mageia.org/MGASA-2015-0229.html · Security Note
• https://bdu.fstec.ru/vul/2015-10889 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-3176 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fqrg-vmvj-jv3x · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2015-0229 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://github.com/moodle/moodle/commit/4f8b6d567494375017c4bc2228e1668d13b21645 · Note
• https://github.com/moodle/moodle/commit/e2e7e35da31ef174589d54f70e791d6acefb59c9 · Note
• https://github.com/moodle/moodle/commit/d5922686e7622e1aa58b9b31633f0906f5be2eb3 · Note
• https://github.com/moodle/moodle/commit/80eb5bc7b7da4927d2d8021e8c18cbd3a8093406 · Note
• http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-50099 · Note