Description

lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitive information by reading the Config Changes Report.

Remediation

References

CVE-2014-0008

Related Vulnerabilities

WordPress Plugin Logo Showcase with Slick Slider-Logo Carousel, Logo Slider & Logo Grid Cross-Site Scripting (1.2.3)

Django Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-28346)

WordPress Plugin Advanced Contact form 7 DB Information Disclosure (1.6.2)

WordPress Plugin Sooqr Search Restricted File Upload (1.1.4)

MySQL CVE-2015-4861 Vulnerability (CVE-2015-4861)

Severity

Medium

Classification

CVE-2014-0008

Tags

Missing Update Known Vulnerabilities