CVE-2012-6105

blog/rsslib.php in Moodle 2.1.x before 2.1.10, 2.2.x before 2.2.7, 2.3.x before 2.3.4, and 2.4.x before 2.4.1 continues to provide a blog RSS feed after blogging is disabled, which allows remote attackers to obtain sensitive information by reading this feed.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
redhatCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 51%
VendorProductVersion
moodlemoodle
2.1.0
moodlemoodle
2.1.1
moodlemoodle
2.1.2
moodlemoodle
2.1.3
moodlemoodle
2.1.4
moodlemoodle
2.1.5
moodlemoodle
2.1.6
moodlemoodle
2.1.7
moodlemoodle
2.1.8
moodlemoodle
2.1.9
moodlemoodle
2.2.0
moodlemoodle
2.2.1
moodlemoodle
2.2.2
moodlemoodle
2.2.3
moodlemoodle
2.2.4
moodlemoodle
2.2.5
moodlemoodle
2.2.6
moodlemoodle
2.3.0
moodlemoodle
2.3.1
moodlemoodle
2.3.2
moodlemoodle
2.3.3
moodlemoodle
2.4.0
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
moodle
trusty
dne
saucy
not-affected
raring
ignored
quantal
ignored
precise
not-affected
oneiric
not-affected
lucid
not-affected
hardy
ignored