CVE-2015-3177 in Moodle

Sumário (Inglês)

Moodle 2.8.x before 2.8.6 does not consider the tool/monitor:subscribe capability before entering subscriptions to site-wide event-monitor rules, which allows remote authenticated users to obtain sensitive information via a subscription request.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Reservar

10/04/2015

Divulgação

01/06/2015

Estado

Confirmado

Inscrições

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidade	CWE	Exp	Con	CVE
75655	Moodle Subscription monitor:subscribe Divulgação de Informação	17	Não definido	Correção oficial	CVE-2015-3177

Fontes

• MITRE
• NVD
• CVE Details