← Back

CVE-2013-1830

nvd nist
Published: Mar 25, 2013Modified: Apr 29, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

user/view.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 does not enforce the forceloginforprofiles setting, which allows remote attackers to obtain sensitive course-profile information by leveraging the guest role, as demonstrated by a Google search.

Affected (103)

1 product
Fedora
1 product
Moodle
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Fedoraproject
Version 17
Version 18
Configuration B
8 vulnerable
Vulnerable SoftwareAffected Versions
Moodle
Version 2.2.0
Version 2.2.1
Version 2.2.2
Version 2.2.3
Version 2.2.4
Version 2.2.5
Version 2.2.6
Version 2.2.7
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Moodle
Version 2.4.0
Version 2.4.1
Configuration D
5 vulnerable
Vulnerable SoftwareAffected Versions
Moodle
Version 2.3.0
Version 2.3.1
Version 2.3.2
Version 2.3.3
Version 2.3.4
Configuration E
86 vulnerable
Vulnerable SoftwareAffected Versions
Moodle
Version 1.1.1
Version 1.2.0
Version 1.2.1
Version 1.3.0
Version 1.3.1
Version 1.3.2
Version 1.3.3
Version 1.3.4
Version 1.4.1
Version 1.4.2
Version 1.4.3
Version 1.4.4
Version 1.4.5
Version 1.5.0 beta
Version 1.5.1
Version 1.5.2
Version 1.5.3
Version 1.5
Version 1.6.0
Version 1.6.1
Version 1.6.2
Version 1.6.3
Version 1.6.4
Version 1.6.5
Version 1.6.6
Version 1.6.7
Version 1.6.8
Version 1.7.1
Version 1.7.2
Version 1.7.3
Version 1.7.4
Version 1.7.5
Version 1.7.6
Version 1.8.10
Version 1.8.11
Version 1.8.12
Version 1.8.13
Version 1.8.14
Version 1.8.1
Version 1.8.2
Version 1.8.3
Version 1.8.4
Version 1.8.5
Version 1.8.6
Version 1.8.7
Version 1.8.8
Version 1.8.9
Version 1.9.10
Version 1.9.11
Version 1.9.12
Version 1.9.13
Version 1.9.14
Version 1.9.15
Version 1.9.16
Version 1.9.17
Version 1.9.18
Version 1.9.1
Version 1.9.2
Version 1.9.3
Version 1.9.4
Version 1.9.5
Version 1.9.6
Version 1.9.7
Version 1.9.8
Version 1.9.9
Version 2.0.0
Version 2.0.1
Version 2.0.2
Version 2.0.3
Version 2.0.4
Version 2.0.5
Version 2.0.6
Version 2.0.7
Version 2.0.8
Version 2.0.9
Version 2.1.0
Version 2.1.10
Version 2.1.1
Version 2.1.2
Version 2.1.3
Version 2.1.4
Version 2.1.5
Version 2.1.6
Version 2.1.7
Version 2.1.8
Version 2.1.9

Related CWEs

References (10)

Source: secalert@redhat.com
Third Party Advisory
Source: secalert@redhat.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory

Timeline

No history available yet.