Description

Moodle 2.0.x before 2.0.3 does not recognize the configuration setting that makes e-mail addresses visible only to course members, which allows remote authenticated users to obtain sensitive address information by reading a full profile page.

Remediation

References

CVE-2011-4289

Related Vulnerabilities

Oracle Application Server CVE-2006-0287 Vulnerability (CVE-2006-0287)

WordPress 4.6.x Multiple Vulnerabilities (4.6 - 4.6.3)

TYPO3 Improper Input Validation Vulnerability (CVE-2013-4250)

WordPress Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-5490)

WordPress Improper Input Validation Vulnerability (CVE-2017-6815)

Severity

Medium

Classification

CVE-2011-4289 CWE-264

Tags

Missing Update Known Vulnerabilities