4

CVE-2010-1617

user/view.php in Moodle 1.8.x before 1.8.12 and 1.9.x before 1.9.8 does not properly check a role, which allows remote authenticated users to obtain the full names of other users via the course profile page.

Data is provided by the National Vulnerability Database (NVD)
Moodle ≫ Moodle Version1.8.1
Moodle ≫ Moodle Version1.8.2
Moodle ≫ Moodle Version1.8.3
Moodle ≫ Moodle Version1.8.4
Moodle ≫ Moodle Version1.8.5
Moodle ≫ Moodle Version1.8.6
Moodle ≫ Moodle Version1.8.7
Moodle ≫ Moodle Version1.8.8
Moodle ≫ Moodle Version1.8.9
Moodle ≫ Moodle Version1.8.10
Moodle ≫ Moodle Version1.8.11
Moodle ≫ Moodle Version1.9.1
Moodle ≫ Moodle Version1.9.2
Moodle ≫ Moodle Version1.9.3
Moodle ≫ Moodle Version1.9.4
Moodle ≫ Moodle Version1.9.5
Moodle ≫ Moodle Version1.9.6
Moodle ≫ Moodle Version1.9.7
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.27% 0.478
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N