Moodle CVE-2013-4938 Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	61522
Class:	Unknown
CVE:	CVE-2013-4938
Remote:	Yes
Local:	No
Published:	Jul 15 2013 12:00AM
Updated:	Jul 15 2013 12:00AM
Credit:	Mawuli Kuivi
Vulnerable:	Moodle Moodle 2.4.4 Moodle Moodle 2.4.3 Moodle Moodle 2.3.7 Moodle Moodle 2.3.6 Moodle Moodle 2.3.3 Moodle Moodle 2.3.2 Moodle Moodle 2.3.1 Moodle Moodle 2.2.10 Moodle Moodle 2.2.9 Moodle Moodle 2.2.6 Moodle Moodle 2.2.5 Moodle Moodle 2.2.4 Moodle Moodle 2.2.3 Moodle Moodle 2.2.2 Moodle Moodle 2.2.1 Moodle Moodle 2.5 Moodle Moodle 2.4.2 Moodle Moodle 2.4.1 Moodle Moodle 2.4 Moodle Moodle 2.3.5 Moodle Moodle 2.3.4 Moodle Moodle 2.3 Moodle Moodle 2.2.8 Moodle Moodle 2.2.7 Moodle Moodle 2.2
Not Vulnerable:	Moodle Moodle 2.5.1 Moodle Moodle 2.4.5 Moodle Moodle 2.3.8 Moodle Moodle 2.2.11

Moodle CVE-2013-4938 Multiple Information Disclosure Vulnerabilities

Moodle is prone to multiple information-disclosure vulnerabilities

Attackers can exploit these issues to obtain sensitive information that may aid in further attacks.

The following versions are affected:

Moodle 2.2 through versions 2.2.10
Moodle 2.3 through versions 2.3.7
Moodle 2.4 through versions 2.4.4
Moodle 2.5

Moodle CVE-2013-4938 Multiple Information Disclosure Vulnerabilities

An attacker can use a browser to exploit these issues.

Moodle CVE-2013-4938 Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Moodle CVE-2013-4938 Multiple Information Disclosure Vulnerabilities

References:

• Moodle Homepage (Moodle)
  
• MSA-13-0026: Personal information leak in IMS-LTI (Moodle)