CVE-2012-1155: Infoleak
Moodle has a database activity export permission issue where the export function of the database activity module exports all entries even those from groups the user does not belong to
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is CVE-2012-1155?
CVE-2012-1155 is a vulnerability in Moodle that allows the export function of the database activity module to export all entries, including those from groups the user does not belong to.
What is the severity of CVE-2012-1155?
CVE-2012-1155 has a severity rating of 7.5 (High).
Which software is affected by CVE-2012-1155?
CVE-2012-1155 affects Moodle versions 1.9 to 2.2, as well as Fedora 15-17, Red Hat Enterprise Linux 6.0, and Debian Linux 6.0.
How can I fix CVE-2012-1155?
To fix CVE-2012-1155, apply the necessary security patches and updates provided by the respective vendors for Moodle, Fedora, Red Hat Enterprise Linux, and Debian Linux.
Where can I find more information about CVE-2012-1155?
You can find more information about CVE-2012-1155 in the references provided: [1] https://security-tracker.debian.org/tracker/CVE-2012-1155 [2] http://lists.fedoraproject.org/pipermail/package-announce/2012-April/077635.html [3] http://lists.fedoraproject.org/pipermail/package-announce/2012-April/078209.html