CVE-2011-4583: Medium severity moodle vulnerability
Published Jul 20, 2012
·Updated
Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.
Affected Software
9 affected components
Moodle moodle=2.1.2
Moodle moodle=2.1.1
Moodle moodle=2.1.0
Moodle moodle=2.0.2
Moodle moodle=2.0.1
Moodle moodle=2.0.4
Moodle moodle=2.0.3
Moodle moodle=2.0.5
Moodle moodle=2.0.0
Remediation
Patch Available
Event History
Jul 20, 2012
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-4583?
CVE-2011-4583 is classified as a medium severity vulnerability.
2
How do I fix CVE-2011-4583?
To mitigate CVE-2011-4583, upgrade to Moodle version 2.0.6 or 2.1.3 or later.
3
What vulnerabilities does CVE-2011-4583 create for users?
CVE-2011-4583 allows remote authenticated users to read web service tokens that should not be accessible.
4
Which versions of Moodle are affected by CVE-2011-4583?
CVE-2011-4583 affects Moodle versions 2.0.0 to 2.0.5 and 2.1.0 to 2.1.2.
5
What can an attacker do with the information from CVE-2011-4583?
An attacker could leverage the exposed web service tokens to gain unauthorized access to resources.