Moodle CVE-2014-7833 Information Disclosure Vulnerability

Bugtraq ID:	71120
Class:	Input Validation Error
CVE:	CVE-2014-7833
Remote:	Yes
Local:	No
Published:	Nov 17 2014 12:00AM
Updated:	Apr 13 2015 10:25PM
Credit:	Pamela Verret
Vulnerable:	Moodle Moodle 2.7.2 Moodle Moodle 2.6.5 Moodle Moodle 2.6.3 Moodle Moodle 2.6.2 Moodle Moodle 2.6.1 Moodle Moodle 2.5.8 Moodle Moodle 2.5.6 Moodle Moodle 2.5.4 Moodle Moodle 2.5.2 Moodle Moodle 2.5.1 Moodle Moodle 2.4.10 Moodle Moodle 2.4.8 Moodle Moodle 2.4.6 Moodle Moodle 2.4.5 Moodle Moodle 2.4.4 Moodle Moodle 2.4.3 Moodle Moodle 2.3.11 Moodle Moodle 2.3.9 Moodle Moodle 2.3.8 Moodle Moodle 2.3.7 Moodle Moodle 2.3.6 Moodle Moodle 2.3.3 Moodle Moodle 2.3.2 Moodle Moodle 2.3.1 Moodle Moodle 2.2.11 Moodle Moodle 2.2.10 Moodle Moodle 2.2.9 Moodle Moodle 2.2.6 Moodle Moodle 2.2.5 Moodle Moodle 2.2.4 Moodle Moodle 2.2.3 Moodle Moodle 2.2.2 Moodle Moodle 2.2.1 Moodle Moodle 2.1.9 Moodle Moodle 2.1.8 Moodle Moodle 2.1.7 Moodle Moodle 2.1.6 Moodle Moodle 2.1.5 Moodle Moodle 2.1.4 Moodle Moodle 2.1.2 Moodle Moodle 2.1.1 Moodle Moodle 2.0.10 Moodle Moodle 2.0.9 Moodle Moodle 2.0.8 Moodle Moodle 2.0.7 Moodle Moodle 2.0.5 Moodle Moodle 2.0.4 Moodle Moodle 2.0.3 Moodle Moodle 2.0.2 Moodle Moodle 2.0.1 Moodle Moodle 1.9.18 Moodle Moodle 1.9.17 Moodle Moodle 1.9.16 Moodle Moodle 1.9.14 Moodle Moodle 1.9.13 Moodle Moodle 1.9.12 Moodle Moodle 1.9.11 Moodle moodle 1.9.10 Moodle moodle 1.9.9 Moodle moodle 1.9.8 Moodle moodle 1.9.7 Moodle moodle 1.9.6 Moodle Moodle 1.9.5 Moodle moodle 1.9.4 Moodle moodle 1.9.3 Moodle moodle 1.9.2 Moodle Moodle 1.9.1 Moodle moodle 1.8.14 Moodle moodle 1.8.13 Moodle moodle 1.8.11 Moodle moodle 1.8.10 Moodle moodle 1.8.9 Moodle moodle 1.8.8 Moodle moodle 1.8.7 Moodle moodle 1.8.6 Moodle moodle 1.8.5 Moodle moodle 1.8.4 Moodle moodle 1.8.3 Moodle moodle 1.8.2 Moodle Moodle 1.8.1 Moodle moodle 1.7.7 Moodle moodle 1.7.6 Moodle moodle 1.7.5 Moodle moodle 1.7.4 Moodle moodle 1.7.3 Moodle moodle 1.7.2 Moodle moodle 1.7.1 Moodle moodle 1.6.9 Moodle moodle 1.6.8 Moodle moodle 1.6.7 Moodle moodle 1.6.6 Moodle moodle 1.6.5 Moodle moodle 1.6.4 Moodle moodle 1.6.3 Moodle moodle 1.6.2 Moodle moodle 1.6.1 Moodle moodle 1.6 dev Moodle moodle 1.6 Moodle moodle 1.5.2 Moodle moodle 1.5.1 Moodle moodle 1.5 Moodle moodle 1.4.3 Moodle moodle 1.4.2 Moodle moodle 1.4.1 Moodle moodle 1.3.4 Moodle moodle 1.3.3 Moodle moodle 1.3.2 Moodle moodle 1.3.1 Moodle moodle 1.3 Moodle Moodle 1.2.2 Moodle moodle 1.2.1 Moodle moodle 1.2 Moodle moodle 1.1.1 Moodle Moodle 2.7.1 Moodle Moodle 2.7 Moodle Moodle 2.6.4 Moodle Moodle 2.6 Moodle Moodle 2.5.7 Moodle Moodle 2.5.5 Moodle Moodle 2.5.3 Moodle Moodle 2.5 Moodle Moodle 2.4.9 Moodle Moodle 2.4.7 Moodle Moodle 2.4.2 Moodle Moodle 2.4.11 Moodle Moodle 2.4.1 Moodle Moodle 2.4 Moodle Moodle 2.3.5 Moodle Moodle 2.3.4 Moodle Moodle 2.3.10 Moodle Moodle 2.3 Moodle Moodle 2.2.8 Moodle Moodle 2.2.7 Moodle Moodle 2.2 Moodle Moodle 2.1.3 Moodle Moodle 2.1.10 Moodle Moodle 2.1 Moodle Moodle 2.0.6 Moodle Moodle 1.9.20 Moodle Moodle 1.9.19 Moodle Moodle 1.9.15 Moodle moodle 1.9 Moodle Moodle 1.8 Moodle moodle 1.7 Moodle Moodle 1.5 Beta Moodle Moodle 1.5 Moodle Moodle 1.4.5 Moodle Moodle 1.4.4 Moodle Moodle 1.4.1 BEA Systems Weblogic Proxy Plugin 1.5.3
Not Vulnerable:	Moodle Moodle 2.7.3 Moodle Moodle 2.6.6 Moodle Moodle 2.5.9 Moodle Moodle 2.8

Moodle CVE-2014-7833 Information Disclosure Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Moodle CVE-2014-7833 Information Disclosure Vulnerability

References:

• MDL-47697 mod_data: Fix group id change when editing. (Moodle)
  
• Moodle Homepage (Moodle)
  
• MSA-14-0040: Information leak in Database activity module (Marina Glancy)