CVE-2012-0792

EUVD-2012-0823
mod/forum/user.php in Moodle 1.9.x before 1.9.16 allows remote authenticated users to obtain the names and other details of arbitrary user accounts by searching for posts.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 44%
Affected Products (NVD)
VendorProductVersion
moodlemoodle
1.9.1
moodlemoodle
1.9.2
moodlemoodle
1.9.3
moodlemoodle
1.9.4
moodlemoodle
1.9.5
moodlemoodle
1.9.6
moodlemoodle
1.9.7
moodlemoodle
1.9.8
moodlemoodle
1.9.9
moodlemoodle
1.9.10
moodlemoodle
1.9.11
moodlemoodle
1.9.12
moodlemoodle
1.9.13
moodlemoodle
1.9.14
moodlemoodle
1.9.15
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
moodle
hardy
ignored
lucid
ignored
maverick
ignored
natty
ignored
oneiric
ignored
precise
not-affected
quantal
not-affected
raring
not-affected
saucy
not-affected
Common Weakness Enumeration
References
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=36b0ddeed45d0751508dcd9fa50f17fda43bae54
http://moodle.org/mod/forum/discuss.php?d=194009
http://www.debian.org/security/2012/dsa-2421
https://bugzilla.redhat.com/show_bug.cgi?id=783532
http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=36b0ddeed45d0751508dcd9fa50f17fda43bae54
http://moodle.org/mod/forum/discuss.php?d=194009
http://www.debian.org/security/2012/dsa-2421
https://bugzilla.redhat.com/show_bug.cgi?id=783532