rss/file.php in Moodle through 2.1.10, 2.2.x before 2.2.11, 2.3.x before 2.3.8, 2.4.x before 2.4.5, and 2.5.x before 2.5.1 does not properly implement the use of RSS tokens for impersonation, which allows remote authenticated users to obtain sensitive block information by reading an RSS feed.

The remote web server hosts Moodle, an open-source course management system.  Versions of Moodle 2.4.x prior to 2.4.5 or 2.5.x prior to 2.5.1 are exposed to the following vulnerabilities :

 - A flaw exists in 'mod/chat/gui_sockets/index.php' that is due to the program failing to properly check for access.  This may allow a remote attacker to access a daemon-mode Chat activity without proper permissions. (CVE-2013-2242)
 - A flaw exists that may lead to the unauthorized disclosure of sensitive information.  The issue is due to the program failing to properly restrict users using view source on pages.  This may allow a remote attacker to gain access to answer information by obtaining ID values for Lesson activity matching questions. (CVE-2013-2243)
 - A flaw exists that allows a remote cross-site scripting (XSS) attack.  This flaw exists because the application does not validate input passed via the Conditional Activities 'user' field before returning it to the user.  This may allow an attacker to create a specially crafted request that would execute arbitrary script code in a user's browser within the trust relationship between their browser and the server. (CVE-2013-2244)
 - A flaw exists that may lead to the unauthorized disclosure of sensitive information.  The issue is due to block information related to the person being impersonated being shown shown along with an error message when an attacker is attempting to impersonate another user using RSS tokens.  This may allow a remote attacker to gain access to sensitive information. (CVE-2013-2245)
 - A flaw exists that may lead to the unauthorized disclosure of sensitive information.  The issue is due to the feedback module failing to properly check for privileges in 'feedback/lib.php'.  This will result in personal information being exposed to a remote attacker. (CVE-2013-2246)
 - A flaw exists in the IMS-LTI (External tool) module that may lead to the unauthorized disclosure of sensitive information.  The issue is due to the program not allowing users to change privacy settings, which will result in personal information always being transferred.  This may allow a remote attacker to gain access to sensitive information. (CVE-2013-4938)

The remote web server hosts Moodle, an open-source course management system.  Versions of Moodle 2.3.x prior to 2.3.8 are exposed to the following vulnerabilities :

 - A flaw exists in 'mod/chat/gui_sockets/index.php' that is due to the program failing to properly check for access.  This may allow a remote attacker to access a daemon-mode Chat activity without proper permissions. (CVE-2013-2242)
 - A flaw exists that may lead to the unauthorized disclosure of sensitive information.  The issue is due to the program failing to properly restrict users using view source on pages.  This may allow a remote attacker to gain access to answer information by obtaining ID values for Lesson activity matching questions. (CVE-2013-2243)
 - A flaw exists that may lead to the unauthorized disclosure of sensitive information.  The issue is due to block information related to the person being impersonated being shown shown along with an error message when an attacker is attempting to impersonate another user using RSS tokens.  This may allow a remote attacker to gain access to sensitive information. (CVE-2013-2245)
 - A flaw exists that may lead to the unauthorized disclosure of sensitive information.  The issue is due to the feedback module failing to properly check for privileges in 'feedback/lib.php'.  This will result in personal information being exposed to a remote attacker. (CVE-2013-2246)
 - A flaw exists in the IMS-LTI (External tool) module that may lead to the unauthorized disclosure of sensitive information.  The issue is due to the program not allowing users to change privacy settings, which will result in personal information always being transferred.  This may allow a remote attacker to gain access to sensitive information. (CVE-2013-4938)

The remote web server hosts Moodle, an open-source course management system.  Versions of Moodle 2.2.x prior to 2.2.11 are exposed to the following vulnerabilities :

 - A flaw exists in 'mod/chat/gui_sockets/index.php' that is due to the program failing to properly check for access.  This may allow a remote attacker to access a daemon-mode Chat activity without proper permissions. (CVE-2013-2242)
 - A flaw exists that may lead to the unauthorized disclosure of sensitive information.  The issue is due to block information related to the person being impersonated being shown shown along with an error message when an attacker is attempting to impersonate another user using RSS tokens.  This may allow a remote attacker to gain access to sensitive information. (CVE-2013-2245)
 - A flaw exists that may lead to the unauthorized disclosure of sensitive information.  The issue is due to the feedback module failing to properly check for privileges in 'feedback/lib.php'.  This will result in personal information being exposed to a remote attacker. (CVE-2013-2246)
 - A flaw exists in the IMS-LTI (External tool) module that may lead to the unauthorized disclosure of sensitive information.  The issue is due to the program not allowing users to change privacy settings, which will result in personal information always being transferred.  This may allow a remote attacker to gain access to sensitive information. (CVE-2013-4938)

Latest upstream release for this branch. Correct unbundling of php-pear-HTML-Quickform. Fix for: MSA-13-0025: XSS vulnerability in YUI library MSA-13-0026: Personal information leak in IMS-LTI CVE-2013-2242 MSA-13-0027: Access issue in Chat module CVE-2013-2243 MSA-13-0028: Answer information revealed in Lesson activity CVE-2013-2244 MSA-13-0029: XSS risk in conditional activities CVE-2013-2245 MSA-13-0030: Information leak through RSS CVE-2013-2246 MSA-13-0031: Personal information leak in Feedback activity

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
9417	Moodle 2.4.x < 2.4.5 / 2.5.x < 2.5.1 Multiple Vulnerabilities	Nessus Network Monitor	CGI	medium
9416	Moodle 2.3.x < 2.3.8 Multiple Vulnerabilities	Nessus Network Monitor	CGI	medium
9415	Moodle 2.2.x < 2.2.11 Multiple Vulnerabilities	Nessus Network Monitor	CGI	medium
69150	Fedora 17 : moodle-2.2.11-1.fc17 (2013-13252)	Nessus	Fedora Local Security Checks	medium
69007	Fedora 19 : moodle-2.4.5-2.fc19 (2013-12964)	Nessus	Fedora Local Security Checks	medium
69006	Fedora 18 : moodle-2.3.8-2.fc18 (2013-12950)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2013-2245

medium

Tenable Plugins

medium

medium

medium

medium

medium

medium