Description

Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.

Remediation

References

CVE-2011-4583

Related Vulnerabilities

IBM RTC Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-5031)

WordPress Plugin BuddyPress Security Bypass (2.3.4)

Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3390)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2013-4525)

Sqlite CVE-2015-5895 Vulnerability (CVE-2015-5895)

Severity

Medium

Classification

CVE-2011-4583 CWE-264

Tags

Missing Update Known Vulnerabilities