Lucene search
Veracode Vulnerability DatabaseVERACODE:29712HistoryMar 16, 2021 - 4:32 a.m.
Insecure Access Control
2021-03-1604:32:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
13
moodle
software
access control
unauthorized user
online users block
EPSS
0.002
Percentile
52.3%
moodle/moodle uses an insecure access control. An unauthorized user is able to view the full name of other users via the online users block.
References
bugzilla.redhat.com/show_bug.cgi?id=1939041
github.com/advisories/GHSA-93wh-35r4-6qmw
lists.fedoraproject.org/archives/list/[email protected]/message/AFSNJ7XHVTC52RSRX2GBQFF3VEEAY2MS/
lists.fedoraproject.org/archives/list/[email protected]/message/UFH5DDMU5TZ3JT4Q52WMRAHACA5MHIMT/
moodle.org/mod/forum/discuss.php?d=419652
Related
prion
prion
Code injection
2021-03-15 22:15:00
cve
cve
CVE-2021-20281
2021-03-15 22:15:13
osv
osv
Moodle allowed some users without permission to view other users' full names
2021-03-29 20:43:23
CVE-2021-20281
2021-03-15 22:15:13
BIT-moodle-2021-20281
2024-03-06 11:10:54
cvelist
cvelist
CVE-2021-20281
2021-03-15 21:35:50
ubuntucve
ubuntucve
CVE-2021-20281
2021-03-15 00:00:00
github
github
Moodle allowed some users without permission to view other users' full names
2021-03-29 20:43:23
nvd
nvd
CVE-2021-20281
2021-03-15 22:15:13
openvas
openvas
Fedora: Security Advisory for moodle (FEDORA-2021-50f63a0161)
2021-03-24 00:00:00
Fedora: Security Advisory for moodle (FEDORA-2021-431b232659)
2021-03-24 00:00:00
Fedora: Security Advisory for moodle (FEDORA-2021-1c27e89d49)
2021-03-20 00:00:00
fedora
fedora
[SECURITY] Fedora 33 Update: moodle-3.9.5-1.fc33
2021-03-23 01:34:46
[SECURITY] Fedora 32 Update: moodle-3.8.8-1.fc32
2021-03-23 01:12:58
[SECURITY] Fedora 34 Update: moodle-3.10.2-1.fc34
2021-03-19 20:34:49
nessus
nessus
Fedora 32 : moodle (2021-50f63a0161)
2021-03-23 00:00:00
Fedora 33 : moodle (2021-431b232659)
2021-03-23 00:00:00
Moodle 3.8.x < 3.8.8 Multiple Vulnerabilities
2023-02-20 00:00:00