CVE-2011-4308

medium

Description

mod/forum/user.php in Moodle 1.9.x before 1.9.14, 2.0.x before 2.0.5, and 2.1.x before 2.1.2 allows remote authenticated users to discover the names of other users via unspecified vectors.

References

https://bugzilla.redhat.com/show_bug.cgi?id=747444

http://www.debian.org/security/2012/dsa-2421

http://moodle.org/mod/forum/discuss.php?d=188322

http://git.moodle.org/gw?p=moodle.git&a=search&s=MDL-28615

Details

Source: Mitre, NVD

Published: 2012-07-11

Updated: 2020-12-01

Risk Information

CVSS v2

Base Score: 4

Vector: CVSS2#AV:N/AC:L/Au:S/C:P/I:N/A:N

Severity: Medium

CVSS v3

Base Score: 4.3

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N