CVE-2011-4308: Medium severity moodle vulnerability
Published Jul 11, 2012
·Updated
mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors.
Affected Software
20 affected components
Moodle moodle=2.0.2
Moodle moodle=1.9.4
Moodle moodle=1.9.1
Moodle moodle=1.9.6
Moodle moodle=1.9.9
Moodle moodle=2.0.1
Moodle moodle=1.9.11
Moodle moodle=2.0.4
Moodle moodle=1.9.2
Moodle moodle=1.9.12
Moodle moodle=1.9.10
Moodle moodle=2.0.3
Moodle moodle=2.1.1
Moodle moodle=1.9.3
Moodle moodle=1.9.13
Moodle moodle=1.9.5
Moodle moodle=1.9.8
Moodle moodle=1.9.7
Moodle moodle=2.0.0
Moodle moodle=2.1.0
Event History
Jul 11, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4308?
The severity of CVE-2011-4308 is considered to be moderate, as it allows remote authenticated users to discover other users' names.
2
How do I fix CVE-2011-4308?
To fix CVE-2011-4308, upgrade your Moodle installation to a version that is 1.9.14 or later, 2.0.5 or later, or 2.1.2 or later.
3
What versions of Moodle are affected by CVE-2011-4308?
CVE-2011-4308 affects Moodle versions 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2.
4
Who can exploit CVE-2011-4308?
CVE-2011-4308 can be exploited by remote authenticated users within the Moodle platform.
5
What type of vulnerability is CVE-2011-4308?
CVE-2011-4308 is classified as a user enumeration vulnerability, allowing the discovery of usernames.