CVE-2011-4279 in Moodle
Summary
Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes it easier for remote attackers to obtain potentially sensitive information via vectors involving use of a search engine, as demonstrated by the search functionality of Google, Yahoo!, Wrensoft Zoom, MSN, Yandex, and AltaVista.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Reservation
11/04/2011
Disclosure
07/16/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61287 | Moodle Search information disclosure | 200 | Not defined | Official fix | CVE-2011-4279 |