CVE-2009-4299: Medium severity moodle vulnerability
mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.
Affected Software
Remediation
Patch Available
Patch Available
Patch Available
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2009-4299?
CVE-2009-4299 is considered a medium severity vulnerability due to improper access control allowing unauthorized access to Glossary entries.
How do I fix CVE-2009-4299?
To fix CVE-2009-4299, upgrade Moodle to version 1.8.11 or 1.9.7 or later to properly enforce access controls.
Which versions of Moodle are affected by CVE-2009-4299?
CVE-2009-4299 affects Moodle versions 1.8 before 1.8.11 and 1.9 before 1.9.7.
What can attackers do with the CVE-2009-4299 vulnerability?
Attackers exploiting CVE-2009-4299 can read unauthorized Glossary entries without proper permissions.
Is there a workaround for CVE-2009-4299?
There is no known workaround for CVE-2009-4299; the only mitigation is to upgrade to a patched version.