Description

lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitive information by reading the Config Changes Report.

Remediation

References

CVE-2014-0008

Related Vulnerabilities

WordPress Plugin Arabic Font Multiple Vulnerabilities (1.2)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2008-2829)

WebLogic Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2021-21350)

SharePoint CVE-2021-27052 Vulnerability (CVE-2021-27052)

TCExam Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2012-4601)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CVE-2014-0008