CVE-2011-4593

Published Jul 20, 2012

Last updated 2 years ago

Overview

Description: Moodle 1.9.x before 1.9.15, 2.0.x before 2.0.6, and 2.1.x before 2.1.3 does not properly handle user/action_redir group messages, which allows remote authenticated users to discover e-mail addresses by visiting the messaging interface.
Source: secalert@redhat.com
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 4
Impact score: 2.9
Exploitability score: 8
Vector string: AV:N/AC:L/Au:S/C:P/I:N/A:N

Weaknesses

nvd@nist.gov: CWE-200

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "24F2602B-8ED3-4026-A9A4-31BE8BDC7724"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D7F24649-B67F-4809-9F54-7B623AEF5A4A"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "6B81655E-C3B5-4115-A4C4-B7AC2FCDAB7F"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "ED9C3840-66BE-47EC-9F0C-E9D2171FF0B2"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DBD062EB-1B1F-4DC8-A4F9-C2EC7D401E9D"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.6:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "291F73E9-1059-4E7F-860F-0DF2A35AA456"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.7:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0EB5859E-0996-46B5-BB44-34BD6EACBCF5"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.8:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "F87F6707-99AB-478A-909D-1D87298D5514"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4BCE8B26-58BB-471C-B291-E6AE22B96C5B"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.10:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "768CE5AF-955B-4148-998A-A46BBDBA618B"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.11:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4283440F-9B21-4CE9-81FF-79DF3DEDCEE7"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.12:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A989FADA-89C3-472B-86BF-0630D1CBBCA8"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.13:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "4FAF84CB-46F1-4F37-BBAC-1CED0600B5B0"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:1.9.14:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8FCA633D-E6CA-4D38-937B-9F83179CDAEA"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:moodle:moodle:2.0.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DD248A1D-CACC-4E76-925A-078B736442AE"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:2.0.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9B8A0403-0869-495F-B7C0-13A387549C7A"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:2.0.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "39791F43-CF89-485B-AA8B-634C282BB025"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:2.0.3:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "428E4846-8C9E-4592-8437-88FCDCED704D"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:2.0.4:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "A4096977-3258-48B0-9C7B-D43FBC8BB1EA"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:2.0.5:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "448E5353-CD0E-407C-84F4-5E6D014A28FE"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:moodle:moodle:2.1.0:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "18C6F348-DAE9-4440-8B3A-8D92ADC6606F"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:2.1.1:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "367537BF-CBDF-4CBB-91B4-6E5A567EF605"
          },
          {
            "criteria": "cpe:2.3:a:moodle:moodle:2.1.2:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DABBF325-C48A-4838-AC5D-0565C78976CD"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References