Lucene search
HistoryMar 25, 2013 - 9:55 p.m.
CVE-2013-1830
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
8.9 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.7%
user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote attackers to obtain sensitive course-profile information by leveraging the guest role, as demonstrated by a Google search.
Affected configurations
Node
fedoraprojectfedoraMatch17
ORfedoraprojectfedoraMatch18
Node
moodlemoodleMatch2.2.0
ORmoodlemoodleMatch2.2.1
ORmoodlemoodleMatch2.2.2
ORmoodlemoodleMatch2.2.3
ORmoodlemoodleMatch2.2.4
ORmoodlemoodleMatch2.2.5
ORmoodlemoodleMatch2.2.6
ORmoodlemoodleMatch2.2.7
Node
moodlemoodleMatch2.4.0
ORmoodlemoodleMatch2.4.1
Node
moodlemoodleMatch2.3.0
ORmoodlemoodleMatch2.3.1
ORmoodlemoodleMatch2.3.2
ORmoodlemoodleMatch2.3.3
ORmoodlemoodleMatch2.3.4
Node
moodlemoodleMatch1.1.1
ORmoodlemoodleMatch1.2.0
ORmoodlemoodleMatch1.2.1
ORmoodlemoodleMatch1.3.0
ORmoodlemoodleMatch1.3.1
ORmoodlemoodleMatch1.3.2
ORmoodlemoodleMatch1.3.3
ORmoodlemoodleMatch1.3.4
ORmoodlemoodleMatch1.4.1
ORmoodlemoodleMatch1.4.2
ORmoodlemoodleMatch1.4.3
ORmoodlemoodleMatch1.4.4
ORmoodlemoodleMatch1.4.5
ORmoodlemoodleMatch1.5
ORmoodlemoodleMatch1.5.0beta
ORmoodlemoodleMatch1.5.1
ORmoodlemoodleMatch1.5.2
ORmoodlemoodleMatch1.5.3
ORmoodlemoodleMatch1.6.0
ORmoodlemoodleMatch1.6.1
ORmoodlemoodleMatch1.6.2
ORmoodlemoodleMatch1.6.3
ORmoodlemoodleMatch1.6.4
ORmoodlemoodleMatch1.6.5
ORmoodlemoodleMatch1.6.6
ORmoodlemoodleMatch1.6.7
ORmoodlemoodleMatch1.6.8
ORmoodlemoodleMatch1.7.1
ORmoodlemoodleMatch1.7.2
ORmoodlemoodleMatch1.7.3
ORmoodlemoodleMatch1.7.4
ORmoodlemoodleMatch1.7.5
ORmoodlemoodleMatch1.7.6
ORmoodlemoodleMatch1.8.1
ORmoodlemoodleMatch1.8.2
ORmoodlemoodleMatch1.8.3
ORmoodlemoodleMatch1.8.4
ORmoodlemoodleMatch1.8.5
ORmoodlemoodleMatch1.8.6
ORmoodlemoodleMatch1.8.7
ORmoodlemoodleMatch1.8.8
ORmoodlemoodleMatch1.8.9
ORmoodlemoodleMatch1.8.10
ORmoodlemoodleMatch1.8.11
ORmoodlemoodleMatch1.8.12
ORmoodlemoodleMatch1.8.13
ORmoodlemoodleMatch1.8.14
ORmoodlemoodleMatch1.9.1
ORmoodlemoodleMatch1.9.2
ORmoodlemoodleMatch1.9.3
ORmoodlemoodleMatch1.9.4
ORmoodlemoodleMatch1.9.5
ORmoodlemoodleMatch1.9.6
ORmoodlemoodleMatch1.9.7
ORmoodlemoodleMatch1.9.8
ORmoodlemoodleMatch1.9.9
ORmoodlemoodleMatch1.9.10
ORmoodlemoodleMatch1.9.11
ORmoodlemoodleMatch1.9.12
ORmoodlemoodleMatch1.9.13
ORmoodlemoodleMatch1.9.14
ORmoodlemoodleMatch1.9.15
ORmoodlemoodleMatch1.9.16
ORmoodlemoodleMatch1.9.17
ORmoodlemoodleMatch1.9.18
ORmoodlemoodleMatch2.0.0
ORmoodlemoodleMatch2.0.1
ORmoodlemoodleMatch2.0.2
ORmoodlemoodleMatch2.0.3
ORmoodlemoodleMatch2.0.4
ORmoodlemoodleMatch2.0.5
ORmoodlemoodleMatch2.0.6
ORmoodlemoodleMatch2.0.7
ORmoodlemoodleMatch2.0.8
ORmoodlemoodleMatch2.0.9
ORmoodlemoodleMatch2.1.0
ORmoodlemoodleMatch2.1.1
ORmoodlemoodleMatch2.1.2
ORmoodlemoodleMatch2.1.3
ORmoodlemoodleMatch2.1.4
ORmoodlemoodleMatch2.1.5
ORmoodlemoodleMatch2.1.6
ORmoodlemoodleMatch2.1.7
ORmoodlemoodleMatch2.1.8
ORmoodlemoodleMatch2.1.9
ORmoodlemoodleMatch2.1.10
References
Related
ubuntucve
ubuntucve
CVE-2013-1830
2013-03-11 00:00:00
osv
osv
Moodle does not enforce the forceloginforprofiles setting
2022-05-13 01:12:57
github
github
Moodle does not enforce the forceloginforprofiles setting
2022-05-13 01:12:57
prion
prion
Code injection
2013-03-25 21:55:00
cvelist
cvelist
CVE-2013-1830
2013-03-25 21:00:00
cve
cve
CVE-2013-1830
2013-03-25 21:55:02
veracode
veracode
Information Disclosure
2017-07-20 09:14:41
nessus
nessus
Fedora 17 : moodle-2.2.9-1.fc17 (2013-4404)
2013-04-03 00:00:00
Fedora 18 : moodle-2.3.6-1.fc18 (2013-4387)
2013-04-03 00:00:00
openvas
openvas
Fedora Update for moodle FEDORA-2013-4404
2013-04-05 00:00:00
Fedora Update for moodle FEDORA-2013-4387
2013-04-05 00:00:00
Fedora Update for moodle FEDORA-2013-4404
2013-04-05 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: moodle-2.2.9-1.fc17
2013-04-03 04:26:27
[SECURITY] Fedora 18 Update: moodle-2.3.6-1.fc18
2013-04-03 04:44:25
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
8.9 High
AI Score
Confidence
High
0.003 Low
EPSS
Percentile
71.7%
Related for NVD:CVE-2013-1830