CVE-2016-3731: Infoleak
Published Apr 20, 2017
·Updated
Moodle 3.0 through 3.0.3, 2.9 through 2.9.5, and 2.8 through 2.8.11 allows remote attackers to obtain the names of hidden forums and forum discussions.
Affected Software
27 affected components
Moodle moodle=2.8.0
Moodle moodle=2.8.1
Moodle moodle=2.8.2
Moodle moodle=2.8.3
Moodle moodle=2.8.4
Moodle moodle=2.8.5
Moodle moodle=2.8.6
Moodle moodle=2.8.7
Moodle moodle=2.8.8
Moodle moodle=2.8.9
Moodle moodle=2.8.10
Moodle moodle=2.8.11
Moodle moodle=2.9.0
Moodle moodle=2.9.1
Moodle moodle=2.9.2
Moodle moodle=2.9.3
Moodle moodle=2.9.4
Moodle moodle=2.9.5
Moodle moodle=3.0.0
Moodle moodle=3.0.0-beta
Moodle moodle=3.0.0-rc1
Moodle moodle=3.0.0-rc2
Moodle moodle=3.0.0-rc3
Moodle moodle=3.0.0-rc4
Moodle moodle=3.0.1
Moodle moodle=3.0.2
Moodle moodle=3.0.3
Event History
Apr 20, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-3731?
CVE-2016-3731 has a medium severity classification due to its potential for information disclosure.
2
How do I fix CVE-2016-3731?
To fix CVE-2016-3731, you should upgrade your Moodle installation to versions 3.0.4, 2.9.6, or 2.8.12 or later.
3
What systems are affected by CVE-2016-3731?
CVE-2016-3731 affects Moodle versions 2.8.0 to 2.8.11, 2.9.0 to 2.9.5, and 3.0.0 to 3.0.3.
4
What is the impact of CVE-2016-3731?
The impact of CVE-2016-3731 allows remote attackers to enumerate hidden forums and discussions, potentially revealing confidential information.
5
Is there a workaround for CVE-2016-3731?
Currently, the recommended action for CVE-2016-3731 is to apply available updates, as no effective workaround is suggested.