PT-2017-8648 · Moodle · Moodle

Mary Cooch · Published 2017-01-20 · Updated 2022-05-17 · CVE-2016-5012

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moodle versions 3.x

Description The issue allows glossary search to display entries without checking user permissions to view them, potentially exposing restricted information.

Recommendations For Moodle versions 3.x, update to a version that includes the necessary permission checks for glossary search entries.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-5012

GHSA-G58X-P3PJ-RG52

Affected Products

Moodle

References · 6

• https://osv.dev/vulnerability/CVE-2016-5012 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-5012 · Security Note
• https://osv.dev/vulnerability/GHSA-g58x-p3pj-rg52 · Vendor Advisory
• https://moodle.org/mod/forum/discuss.php?d=336697 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• http://securityfocus.com/bid/92041 · Note