Description

Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.

Remediation

References

CVE-2011-4583

Related Vulnerabilities

WordPress Plugin Slider Hero with Animation, Video Background Unspecified Vulnerability (5.5.0)

Squid Other Vulnerability (CVE-2010-2951)

WordPress Plugin myFlash Remote File Include (1.10)

WordPress Plugin Gallery PhotoBlocks Cross-Site Scripting (1.1.40)

WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Multiple Cross-Site Scripting Vulnerabilities (1.1.30)

Severity

Medium

Classification

CVE-2011-4583 CWE-264

Tags

Missing Update Known Vulnerabilities