CVE-2014-0008

Published: Jan 20, 2014Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

lib/adminlib.php in Moodle through 2.3.11, 2.4.x before 2.4.8, 2.5.x before 2.5.4, and 2.6.x before 2.6.1 logs cleartext passwords, which allows remote authenticated administrators to obtain sensitive information by reading the Config Changes Report.

Affected (25)

Products: Moodle: Moodle

Moodle

1 product

Moodle

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.5.0
Moodle Moodle	Version 2.5.1
Moodle Moodle	Version 2.5.2
Moodle Moodle	Version 2.5.3

Configuration B

1 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.6.0

Configuration C

8 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Version 2.4.0
Moodle Moodle	Version 2.4.1
Moodle Moodle	Version 2.4.2
Moodle Moodle	Version 2.4.3
Moodle Moodle	Version 2.4.4
Moodle Moodle	Version 2.4.5
Moodle Moodle	Version 2.4.6
Moodle Moodle	Version 2.4.7

Configuration D

12 vulnerable

Vulnerable Software	Affected Versions
Moodle Moodle	Up to 2.3.11
Moodle Moodle	Version 2.3.0
Moodle Moodle	Version 2.3.10
Moodle Moodle	Version 2.3.1
Moodle Moodle	Version 2.3.2
Moodle Moodle	Version 2.3.3
Moodle Moodle	Version 2.3.4
Moodle Moodle	Version 2.3.5
Moodle Moodle	Version 2.3.6
Moodle Moodle	Version 2.3.7
Moodle Moodle	Version 2.3.8
Moodle Moodle	Version 2.3.9