Vulnerability Details CVE-2009-4299
mod/glossary/showentry.php in the Glossary module for Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 does not properly perform access control, which allows attackers to read unauthorized Glossary entries via unknown vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.021
EPSS Ranking 80.3%
CVSS Severity
CVSS v2 Score 5.0
References
- http://docs.moodle.org/en/Moodle_1.8.11_release_notes
- http://docs.moodle.org/en/Moodle_1.9.7_release_notes
- http://moodle.org/mod/forum/discuss.php?d=139103
- http://secunia.com/advisories/37614
- http://www.securityfocus.com/bid/37244
- http://www.vupen.com/english/advisories/2009/3455
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html
- http://docs.moodle.org/en/Moodle_1.8.11_release_notes
- http://docs.moodle.org/en/Moodle_1.9.7_release_notes
- http://moodle.org/mod/forum/discuss.php?d=139103
- http://secunia.com/advisories/37614
- http://www.securityfocus.com/bid/37244
- http://www.vupen.com/english/advisories/2009/3455
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00704.html
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00730.html
- https://www.redhat.com/archives/fedora-package-announce/2009-December/msg00751.html
Products affected by CVE-2009-4299
-
cpe:2.3:a:moodle:moodle:1.8.1
-
cpe:2.3:a:moodle:moodle:1.8.10
-
cpe:2.3:a:moodle:moodle:1.8.2
-
cpe:2.3:a:moodle:moodle:1.8.3
-
cpe:2.3:a:moodle:moodle:1.8.4
-
cpe:2.3:a:moodle:moodle:1.8.5
-
cpe:2.3:a:moodle:moodle:1.8.7
-
cpe:2.3:a:moodle:moodle:1.8.8
-
cpe:2.3:a:moodle:moodle:1.8.9
-
cpe:2.3:a:moodle:moodle:1.9.1
-
cpe:2.3:a:moodle:moodle:1.9.2
-
cpe:2.3:a:moodle:moodle:1.9.3
-
cpe:2.3:a:moodle:moodle:1.9.4
-
cpe:2.3:a:moodle:moodle:1.9.5
-
cpe:2.3:a:moodle:moodle:1.9.6