Description
Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 stores (1) password hashes and (2) unspecified "secrets" in backup files, which might allow attackers to obtain sensitive information.
Remediation
References
Related Vulnerabilities
WordPress Plugin Contact Form 7 Privilege Escalation (5.0.3)
WordPress Plugin WPBakery Page Builder Clipboard Cross-Site Scripting (4.5.5)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-1818)
IBM RTC Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-0372)