CVE-2011-4304: Infoleak
Published Jul 11, 2012
·Updated
The chat functionality in Moodle 2.0.x before 2.0.5 and 2.1.x before 2.1.2 allows remote authenticated users to discover the name of any user via a beep operation.
Affected Software
7 affected components
Moodle moodle=2.0.2
Moodle moodle=2.0.1
Moodle moodle=2.0.4
Moodle moodle=2.0.3
Moodle moodle=2.1.1
Moodle moodle=2.0.0
Moodle moodle=2.1.0
Remediation
Patch Available
Event History
Jul 11, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4304?
CVE-2011-4304 is classified as a moderate severity vulnerability.
2
How do I fix CVE-2011-4304?
To fix CVE-2011-4304, you should upgrade to Moodle versions 2.0.5 or 2.1.2 or later.
3
What type of vulnerability is CVE-2011-4304?
CVE-2011-4304 is a user enumeration vulnerability in the Moodle chat functionality.
4
Who is affected by CVE-2011-4304?
Remote authenticated users of Moodle versions 2.0.x before 2.0.5 and 2.1.x before 2.1.2 are affected by CVE-2011-4304.
5
When was CVE-2011-4304 published?
CVE-2011-4304 was published in October 2011.