Moodle CVE-2013-1832 Password Information Disclosure Vulnerability
BID:60034
Info
Moodle CVE-2013-1832 Password Information Disclosure Vulnerability
| Bugtraq ID: | 60034 |
| Class: | Unknown |
| CVE: |
CVE-2013-1832 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 25 2013 12:00AM |
| Updated: | Apr 13 2015 10:12PM |
| Credit: | John Holmes |
| Vulnerable: |
Moodle Moodle 2.3.3 Moodle Moodle 2.3.2 Moodle Moodle 2.3.1 Moodle Moodle 2.2.6 Moodle Moodle 2.2.5 Moodle Moodle 2.2.4 Moodle Moodle 2.2.3 Moodle Moodle 2.2.2 Moodle Moodle 2.2.1 Moodle Moodle 2.4.1 Moodle Moodle 2.4 Moodle Moodle 2.3.4 Moodle Moodle 2.3 Moodle Moodle 2.2.7 Moodle Moodle 2.2 |
| Not Vulnerable: |
Moodle Moodle 2.4.2 Moodle Moodle 2.3.5 Moodle Moodle 2.2.8 |
Discussion
Moodle CVE-2013-1832 Password Information Disclosure Vulnerability
Moodle is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.
Moodle versions prior to 2.4.2, 2.3.5, and 2.2.8 are vulnerable.
Note: This issue was previously discussed in BID 58660 (Moodle Multiple Remote Security Vulnerabilities), but has been moved to its own record for better documentation.
Moodle is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.
Moodle versions prior to 2.4.2, 2.3.5, and 2.2.8 are vulnerable.
Note: This issue was previously discussed in BID 58660 (Moodle Multiple Remote Security Vulnerabilities), but has been moved to its own record for better documentation.
Exploit / POC
Moodle CVE-2013-1832 Password Information Disclosure Vulnerability
An attacker can use a browser to exploit this issue.
An attacker can use a browser to exploit this issue.