Description

Moodle 2.0.x before 2.0.6 and 2.1.x before 2.1.3 displays web service tokens associated with (1) disabled services and (2) users who no longer have authorization, which allows remote authenticated users to have an unspecified impact by reading these tokens.

Remediation

References

CVE-2011-4583

Related Vulnerabilities

MySQL Improper Input Validation Vulnerability (CVE-2006-4227)

WordPress Plugin Contextual Adminbar Color Cross-Site Scripting (0.2)

Jboss EAP Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') Vulnerability (CVE-2014-0226)

MySQL CVE-2019-2529 Vulnerability (CVE-2019-2529)

concrete5 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2015-4724)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-264 CVE-2011-4583