PT-2024-8665 · Moodle+2 · Moodle+2

Published 2024-10-14 · Updated 2024-12-03 · CVE-2024-48896

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Moodle (affected versions not specified)

Description A vulnerability in Moodle is related to shortcomings in the error reporting mechanism. It allows a remote attacker to gain unauthorized access to protected information. The issue is also described as allowing users with the "send message" capability to view other users' names that they may not otherwise have access to via an error message in Messaging. The name returned follows the full name format configured on the site.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Generation of Error Message Containing Sensitive Information

Weakness Enumeration

CWE-209

Related Identifiers

ALT-PU-2024-16385

ALT-PU-2024-16417

BDU:2024-10264

BIT-MOODLE-2024-48896

CVE-2024-48896

GHSA-CQ5F-WV7P-5GFC

Affected Products

Alt Linux

Moodle

Red Os

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2024-48896 · Security Note
• https://osv.dev/vulnerability/GHSA-cq5f-wv7p-5gfc · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2024-48896 · Security Note
• https://osv.dev/vulnerability/BIT-moodle-2024-48896 · Vendor Advisory
• https://ubuntu.com/security/CVE-2024-48896 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-10264 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2024-48896 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-48896 · Vendor Advisory
• https://github.com/moodle/moodle · Note
• https://bugzilla.redhat.com/show_bug.cgi?id=2318822 · Note
• https://t.me/cvedetector/11326 · Telegram Post
• https://moodle.org/security · Note
• https://redos.red-soft.ru/support/secure · Note
• https://twitter.com/CVEnew/status/1858472499832324281 · Twitter Post
• https://redos.red-soft.ru/support/secure/uyazvimosti/support/secure/uyazvimosti/mnozhestvennye-uyazvimosti-moodle-2111241 · Note