Lucene search
RedhatCVELIST:CVE-2014-3617HistorySep 15, 2014 - 2:00 p.m.
CVE-2014-3617
2014-09-1514:00:00
redhat
www.cve.org
6
The forum_print_latest_discussions function in mod/forum/lib.php in Moodle through 2.4.11, 2.5.x before 2.5.8, 2.6.x before 2.6.5, and 2.7.x before 2.7.2 allows remote authenticated users to bypass the individual answer-posting requirement without the mod/forum:viewqandawithoutposting capability, and discover an author’s username, by leveraging the student role and visiting a Q&A forum.
Related
prion
prion
Design/Logic Flaw
2014-09-15 14:55:00
mageia
mageia
Updated moodle packages fix security vulnerbilities
2014-09-15 14:36:30
osv
osv
Moodle allows discovery of an author's username
2022-05-13 01:12:42
github
github
Moodle allows discovery of an author's username
2022-05-13 01:12:42
openvas
openvas
Mageia: Security Advisory (MGASA-2014-0379)
2022-01-28 00:00:00
cve
cve
CVE-2014-3617
2014-09-15 14:55:11
veracode
veracode
Information Disclosure
2017-07-19 09:10:04
ubuntucve
ubuntucve
CVE-2014-3617
2014-09-15 00:00:00
nvd
nvd
CVE-2014-3617
2014-09-15 14:55:11
nessus
nessus