CVE-2011-4583 in Moodle
Summary
Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
11/29/2011
Disclosure
07/20/2012
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 61346 | Moodle Authorization access control | 264 | Not defined | Official fix | CVE-2011-4583 |