First published: Wed Jul 11 2012(Updated: )
The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover the name of any user via a beep operation.
Credit: secalert@redhat.com
Affected Software | Affected Version | How to fix |
---|---|---|
Moodle | =2.0.2 | |
Moodle | =2.0.1 | |
Moodle | =2.0.4 | |
Moodle | =2.0.3 | |
Moodle | =2.1.1 | |
Moodle | =2.0.0 | |
Moodle | =2.1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-4304 is classified as a moderate severity vulnerability.
To fix CVE-2011-4304, you should upgrade to Moodle versions 2.0.5 or 2.1.2 or later.
CVE-2011-4304 is a user enumeration vulnerability in the Moodle chat functionality.
Remote authenticated users of Moodle versions 2.0.x before 2.0.5 and 2.1.x before 2.1.2 are affected by CVE-2011-4304.
CVE-2011-4304 was published in October 2011.