CVE-2018-10889

Опубликовано: 10 июл. 2018

Источник: nvd

CVSS3: 4.3

CVSS3: 5.3

CVSS2: 5

EPSS Низкий

Описание

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.

Ссылки

http://www.securityfocus.com/bid/104733
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10889
Issue Tracking
Patch
Third Party Advisory
https://moodle.org/mod/forum/discuss.php?d=373369
Patch
Vendor Advisory
http://www.securityfocus.com/bid/104733
Third Party Advisory
VDB Entry
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2018-10889
Issue Tracking
Patch
Third Party Advisory
https://moodle.org/mod/forum/discuss.php?d=373369
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 3.3.0 (включая) до 3.3.7 (исключая)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 3.4.0 (включая) до 3.4.4 (исключая)

cpe:2.3:a:moodle:moodle:*:*:*:*:*:*:*:*

Версия от 3.5.0 (включая) до 3.5.1 (исключая)

EPSS

Процентиль: 46%

0.00232

Низкий

4.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-532

Связанные уязвимости

CVE-2018-10889

CVSS3: 4.3

ubuntu

почти 7 лет назад

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No option existed to omit logs from data privacy exports, which may contain details of other users who interacted with the requester.

CVE-2018-10889

CVSS3: 4.3

debian

почти 7 лет назад

A flaw was found in moodle before versions 3.5.1, 3.4.4, 3.3.7. No opt ...

GHSA-wmvq-q9h8-7j4g

CVSS3: 5.3

github

около 3 лет назад

Moodle sensitive information disclosure

EPSS

Процентиль: 46%

0.00232

Низкий

4.3 Medium

CVSS3

5.3 Medium

CVSS3

5 Medium

CVSS2

Дефекты

CWE-532