Moodle up to 2.3.3 blog/rsslib.php information disclosure

Summaryinfo

A vulnerability identified as problematic has been detected in Moodle. The affected element is an unknown function in the library blog/rsslib.php. The manipulation leads to information disclosure. This vulnerability is listed as CVE-2012-6105. There is no available exploit. You should upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as problematic, has been found in Moodle (Learning Management Software). This issue affects some unknown functionality in the library blog/rsslib.php. The manipulation with an unknown input leads to a information disclosure vulnerability. Using CWE to declare the problem leads to CWE-200. The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. Impacted is confidentiality. The summary by CVE is:

blog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 continues to provide a blog RSS feed after blogging is disabled, which allows remote attackers to obtain sensitive information by reading this feed.

The weakness was presented 01/27/2013 (Website). It is possible to read the advisory at moodle.org. The identification of this vulnerability is CVE-2012-6105 since 12/06/2012. The exploitation is known to be easy. The attack may be initiated remotely. No form of authentication is needed for a successful exploitation. Technical details of the vulnerability are known, but there is no available exploit. The attack technique deployed by this issue is T1592 according to MITRE ATT&CK.

By approaching the search of inurl:blog/rsslib.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 2.1.7 eliminates this vulnerability.

See VDB-63444, VDB-63442, VDB-63441 and VDB-63440 for similar entries. Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Productinfo

Type

• Learning Management Software

Name

• Moodle

Version

• 2.1
• 2.1.1
• 2.1.2
• 2.1.3
• 2.1.4
• 2.1.5
• 2.1.6
• 2.1.7
• 2.1.8
• 2.1.9
• 2.2
• 2.2.1
• 2.2.2
• 2.2.3
• 2.2.4
• 2.2.5
• 2.2.6
• 2.3.1
• 2.3.2
• 2.3.3

License

• open-source

Website

• Product: https://moodle.org/

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Discussion