CVE-2016-5014

Опубликовано: 20 янв. 2017

Источник: nvd

CVSS3: 5.4

CVSS2: 5.8

EPSS Низкий

Описание

In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course.

Ссылки

http://www.securityfocus.com/bid/92042
Third Party Advisory
VDB Entry
https://moodle.org/mod/forum/discuss.php?d=336699
Patch
Vendor Advisory
http://www.securityfocus.com/bid/92042
Third Party Advisory
VDB Entry
https://moodle.org/mod/forum/discuss.php?d=336699
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:2.8.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.7:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.8:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.9:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.10:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.11:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.8.12:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.5:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:2.9.6:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.0.0:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:moodle:moodle:3.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 44%

0.00215

Низкий

5.4 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-200

Связанные уязвимости

CVE-2016-5014

CVSS3: 5.4

ubuntu

больше 8 лет назад

In Moodle 2.x and 3.x, an unenrolled user still receives event monitor notifications even though they can no longer access the course.

CVE-2016-5014

CVSS3: 5.4

debian

больше 8 лет назад

In Moodle 2.x and 3.x, an unenrolled user still receives event monitor ...

GHSA-c4cq-v4wp-28hg

CVSS3: 5.4

github

около 3 лет назад

Moodle sensitive information disclosure

EPSS

Процентиль: 44%

0.00215

Низкий

5.4 Medium

CVSS3

5.8 Medium

CVSS2

Дефекты

CWE-200